@prismer/runtime 1.9.9 → 1.9.22

package/dist/index.js

@@ -1,5 +1,11 @@
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
@@ -9,12 +15,12 @@ var __export = (target, all) => {
 };
 
 // src/cli/ui.ts
-import * as fs5 from "fs";
-import * as path8 from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import * as fs4 from "fs";
+import * as path6 from "path";
+import { fileURLToPath } from "url";
 function thisDirname() {
   try {
-    return path8.dirname(fileURLToPath2(import.meta.url));
+    return path6.dirname(fileURLToPath(import.meta.url));
   } catch {
     return process.cwd();
   }
@@ -24,18 +30,18 @@ function findIconPath(size = "big") {
   const here = thisDirname();
   const candidates = [
     // npm-installed: node_modules/@prismer/runtime/dist/cli.js → ../assets
-    path8.resolve(here, "../assets", name),
+    path6.resolve(here, "../assets", name),
     // alternate dist layout (sub-bundle): dist/bin/cli.js → ../../assets
-    path8.resolve(here, "../../assets", name),
+    path6.resolve(here, "../../assets", name),
     // source/typecheck: src/cli/ui.ts → ../../assets
-    path8.resolve(here, "../../assets", name),
+    path6.resolve(here, "../../assets", name),
     // dev mode: cwd happens to be runtime root
-    path8.resolve(process.cwd(), "assets", name),
-    path8.resolve(process.cwd(), "sdk/prismer-cloud/runtime/assets", name)
+    path6.resolve(process.cwd(), "assets", name),
+    path6.resolve(process.cwd(), "sdk/prismer-cloud/runtime/assets", name)
   ];
   for (const candidate of candidates) {
     try {
-      if (fs5.existsSync(candidate)) return candidate;
+      if (fs4.existsSync(candidate)) return candidate;
     } catch {
     }
   }
@@ -159,7 +165,7 @@ var init_ui = __esm({
         const iconPath = findIconPath("small");
         if (iconPath !== null) {
           try {
-            const raw = fs5.readFileSync(iconPath, "utf-8").replace(/\n+$/, "");
+            const raw = fs4.readFileSync(iconPath, "utf-8").replace(/\n+$/, "");
             for (const line of raw.split("\n")) {
               this.write(this.cyan(line) + "\n");
             }
@@ -182,7 +188,7 @@ var init_ui = __esm({
         const shouldUseFull = opts?.full === true || width >= 120;
         if (shouldUseFull && iconPath !== null) {
           try {
-            const raw = fs5.readFileSync(iconPath, "utf-8");
+            const raw = fs4.readFileSync(iconPath, "utf-8");
             const lines = raw.split("\n");
             for (const line of lines) {
               const brandedLine = line.replace("Prismer Cloud SDK", "Prismer Runtime CLI");
@@ -446,7 +452,7 @@ __export(util_exports, {
   info: () => info,
   normalizeCloudUrl: () => normalizeCloudUrl,
   ok: () => ok,
-  pidAlive: () => pidAlive2,
+  pidAlive: () => pidAlive,
   pidFilePath: () => pidFilePath,
   printBanner: () => printBanner,
   printJson: () => printJson,
@@ -457,8 +463,8 @@ __export(util_exports, {
   warn: () => warn,
   writePidFile: () => writePidFile
 });
-import { existsSync as existsSync11, readFileSync as readFileSync9, unlinkSync as unlinkSync2, writeFileSync as writeFileSync6 } from "fs";
-import { join as join14 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync8, unlinkSync as unlinkSync2, writeFileSync as writeFileSync6 } from "fs";
+import { join as join10 } from "path";
 function color(kind, text) {
   if (process.env.NO_COLOR === "1" || process.env.NO_COLOR === "true") return text;
   return `${ANSI[kind]}${text}${ANSI.reset}`;
@@ -523,10 +529,10 @@ function runAction(fn, opts = {}) {
 function printBanner(opts = {}) {
   const ui = getUI();
   if (opts.compact) {
-    ui.smallHeader("Runtime CLI v1.9.7");
+    ui.smallHeader("Runtime CLI v${VERSION}");
     return;
   }
-  ui.banner("Runtime CLI v1.9.7", { full: true });
+  ui.banner("Runtime CLI v${VERSION}", { full: true });
 }
 function ok(label, detail) {
   getUI().ok(label, detail);
@@ -552,7 +558,7 @@ function table(rows, columns) {
   getUI().table(rows, { columns });
 }
 function pidFilePath(paths) {
-  return join14(paths.root, "daemon.pid");
+  return join10(paths.root, "daemon.pid");
 }
 function writePidFile(paths, pid) {
   writeFileSync6(pidFilePath(paths), `${pid}
@@ -561,7 +567,7 @@ function writePidFile(paths, pid) {
 function readPidFile(paths) {
   const p = pidFilePath(paths);
   if (!existsSync11(p)) return void 0;
-  const raw = readFileSync9(p, "utf8").trim();
+  const raw = readFileSync8(p, "utf8").trim();
   const pid = Number.parseInt(raw, 10);
   return Number.isFinite(pid) ? pid : void 0;
 }
@@ -574,7 +580,7 @@ function clearPidFile(paths) {
     }
   }
 }
-function pidAlive2(pid) {
+function pidAlive(pid) {
   try {
     process.kill(pid, 0);
     return true;
@@ -657,36 +663,15 @@ var AdapterRegistry = class {
 };
 
 // src/adapters/hermes/index.ts
-import { execFileSync, spawn } from "child_process";
+import { spawn } from "child_process";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
-import { createRequire } from "module";
 import { homedir } from "os";
 import { dirname, join } from "path";
-import { fileURLToPath } from "url";
 import Database from "better-sqlite3";
 import * as YAML from "yaml";
 import { z } from "zod";
 var PRISMER_IM_SKILL_NAME = "prismer-im-collab";
-var PRISMER_IM_SKILL_CONTENT = `---
-name: prismer-im-collab
-description: Coordinate reliably in Prismer conversations, use workspace assets through bounded MCP tools, and keep task work on the board.
-allowed-tools: prismer.agent.send prismer.conversation.listAgents prismer.task.create prismer.task.update prismer.task.complete prismer.approval.request_human_approval prismer.asset.search prismer.asset.describe prismer.asset.read
-metadata:
-  prismer:
-    version: "1.0.0"
-    mcp_tools:
-      - prismer.agent.send
-      - prismer.conversation.listAgents
-      - prismer.task.create
-      - prismer.task.update
-      - prismer.task.complete
-      - prismer.approval.request_human_approval
-      - prismer.asset.search
-      - prismer.asset.describe
-      - prismer.asset.read
----
-
-# Prismer IM Collaboration
+var PRISMER_IM_SKILL_CONTENT = `# Prismer IM Collaboration
 
 You are an agent in a Prismer multi-agent workspace. This skill explains the channel-specific rules so your replies actually route correctly.
 
@@ -716,19 +701,6 @@ You will receive a \`[Channel context]\` block at the top of each prompt indicat
 | Address another agent so the platform dispatches your message to them | Call \`prismer.agent.send\` (from the \`prismer-tasks\` MCP server). |
 | Look up which agents you can talk to | Call \`prismer.conversation.listAgents\` before guessing usernames. |
 | Create / update tasks on the workspace board | \`prismer.task.create\` / \`prismer.task.update\` from \`prismer-tasks\` MCP. |
-| Ask for structured human sign-off | \`prismer.approval.request_human_approval\`. |
-| Find uploaded workspace files | \`prismer.asset.search\`. |
-| Inspect file metadata before reading bytes | \`prismer.asset.describe\`. |
-| Read a bounded byte range from a file | \`prismer.asset.read\`. |
-
-## Workspace asset rules
-
-- Web-uploaded workspace files are available as asset metadata first; bytes are fetched lazily by the local daemon.
-- When a task needs file content, call \`prismer.asset.describe\` first, then read only the needed range with \`prismer.asset.read\`.
-- For many files, call \`prismer.asset.search\` to find candidates. Do not ask the user to paste file contents already present in workspace assets.
-- Do not claim you read a file unless an asset tool call succeeded.
-- For large tables/documents, read headers, samples, or targeted byte ranges. Never try to load the whole file into a reply.
-- Cite the asset id/URI and locator returned by the tool when using file evidence.
 
 ### When to use \`prismer.agent.send\` vs inline \`@\`
 
@@ -742,7 +714,6 @@ You will receive a \`[Channel context]\` block at the top of each prompt indicat
 2. **Don't fabricate usernames.** If \`prismer.conversation.listAgents\` doesn't return a name, that agent doesn't exist; use plain text and address them by displayName (no @).
 3. **Don't pretend to call a tool.** If you write "I sent a message via the tool" without actually invoking the tool, the message doesn't exist; the human will see the inconsistency.
 4. **Check tool return values.** \`prismer.agent.send\` may return \`{ ok: false, error: 'agent_not_found' }\`; surface the error rather than pretending it worked.
-5. **Use structured approvals.** For destructive, irreversible, external, spend, access, or publish operations, call \`prismer.approval.request_human_approval\`; do not inline-mention a human asking for approval.
 
 ## Example: group discussion handoff
 
@@ -830,23 +801,7 @@ var HermesProfileConfigSchema = z.object({
   hermesSourceDir: z.string().optional(),
   nativeMirrorTimeoutMs: z.number().int().positive().default(2e3),
   /** Task authority level: executor (default) or orchestrator. */
-  taskAuthority: z.enum(["executor", "orchestrator"]).optional().default("executor"),
-  /** Human approval escalation policy. Enforcement is currently prompt/cloud-side. */
-  approvalPolicy: z.enum(["strict", "auto-low-risk", "autonomous"]).optional().default("auto-low-risk"),
-  /** Agent-level MCP tool allowlist. Empty/null means all tools. Supports exact names and trailing * wildcards. */
-  mcpAllowlist: z.array(z.string()).nullable().optional(),
-  /** Agent-level operating principles injected through /v1/runs instructions. */
-  operatingPrinciples: z.union([z.string(), z.record(z.string())]).optional(),
-  /**
-   * Role-template snapshot carried in AgentProfile.config by cloud ACP.
-   * Expected fields used here:
-   *   - roleTemplate.mcpServers[].toolsAllowlist
-   *   - roleTemplate.operatingPrinciples
-   */
-  roleTemplate: z.object({
-    mcpServers: z.array(z.object({ toolsAllowlist: z.array(z.string()).optional() }).passthrough()).optional(),
-    operatingPrinciples: z.union([z.string(), z.record(z.string())]).optional()
-  }).passthrough().optional()
+  taskAuthority: z.enum(["executor", "orchestrator"]).optional().default("executor")
 });
 var hermesAdapter = {
   name: "hermes",
@@ -861,22 +816,14 @@ var hermesAdapter = {
       errors: r.error.issues.map((i) => `${i.path.join(".") || "<root>"}: ${i.message}`)
     };
   },
-  async prepareProfile(profile) {
-    const config = HermesProfileConfigSchema.parse(profile.config);
-    if (config.configurePrismerProvider) {
-      const profileName = getHermesProfileName(profile);
-      const agentUsername = profile.agentUsername || profileName;
-      configurePrismerProvider(profileName, config, agentUsername, profile.workspaceId);
-    }
-  },
   async ensureService(profile) {
     const config = HermesProfileConfigSchema.parse(profile.config);
-    const profileName = getHermesProfileName(profile);
-    const portOverride = config.port !== 8642 ? config.port : portForProfile(`${profileName}:${config.apiKey}`, 8642);
+    const profileName = config.hermesProfileName && config.hermesProfileName !== "default" ? config.hermesProfileName : profile.agentUsername || profile.id.slice(0, 8);
+    const portOverride = config.port !== 8642 ? config.port : portForProfile(profileName, 8642);
     const baseUrl = `http://127.0.0.1:${portOverride}`;
     const agentUsername = profile.agentUsername || profileName;
     if (config.configurePrismerProvider) {
-      configurePrismerProvider(profileName, config, agentUsername, profile.workspaceId);
+      configurePrismerProvider(profileName, config, agentUsername);
     }
     if (!await checkHealth(baseUrl, config.apiKey)) {
       if (!config.autoStart) {
@@ -886,7 +833,6 @@ var hermesAdapter = {
 (set autoStart: true on the AgentProfile to spawn it automatically)`
         );
       }
-      await stopStaleHermesGateways(profileName, portOverride, config.startupTimeoutMs);
       spawn("hermes", ["-p", profileName, "gateway", "run"], {
         detached: false,
         stdio: "ignore",
@@ -946,8 +892,6 @@ var HermesService = class {
     const startedAt = Date.now();
     let runId;
     const sysPrompt = typeof task.metadata?.systemPrompt === "string" ? task.metadata.systemPrompt : void 0;
-    const operatingPrinciples = typeof task.metadata?.operatingPrinciples === "string" ? task.metadata.operatingPrinciples : void 0;
-    const instructions = [sysPrompt, operatingPrinciples].filter(Boolean).join("\n\n");
     if (sysPrompt) {
       try {
         const profileDir = getHermesProfileDir(this.profileName);
@@ -984,7 +928,7 @@ var HermesService = class {
         // sent `messages: [...]` which Hermes 0.12 rejects with 400.
         body: JSON.stringify({
           input: task.prompt,
-          instructions: instructions || void 0,
+          instructions: sysPrompt,
           session_id: typeof task.metadata?.conversationId === "string" ? task.metadata.conversationId : void 0,
           stream: true
         }),
@@ -1269,7 +1213,7 @@ function formatHermesGoalText(goals) {
     return `${index + 1}. ${priority}${goal.title}${description}`;
   }).join("\n");
 }
-function configurePrismerProvider(profileName, config, agentUsername, workspaceId) {
+function configurePrismerProvider(profileName, config, agentUsername) {
   const baseUrl = resolvePrismerProviderBaseUrl(config);
   const apiKey = resolvePrismerApiKey(config);
   if (!baseUrl || !apiKey) {
@@ -1312,16 +1256,9 @@ function configurePrismerProvider(profileName, config, agentUsername, workspaceI
         PRISMER_API_KEY: apiKey,
         PRISMER_BASE_URL: baseUrl.replace(/\/api\/v1\/?$/, "")
       };
-      if (workspaceId) {
-        mcpEnv.PRISMER_WORKSPACE_ID = workspaceId;
-      }
       if (agentUsername) {
         mcpEnv.PRISMER_AGENT_USERNAME = agentUsername;
       }
-      const allowlist = resolveMcpAllowlist(config);
-      if (allowlist) {
-        mcpEnv.PRISMER_MCP_ALLOWLIST = allowlist.join(",");
-      }
       mcpServers["prismer-tasks"] = {
         command: "node",
         args: [serverPath],
@@ -1342,17 +1279,20 @@ function resolvePrismerMcpServerPath(config) {
   if (config.prismerMcpServerPath) return config.prismerMcpServerPath;
   if (process.env.PRISMER_MCP_SERVER) return process.env.PRISMER_MCP_SERVER;
   try {
+    const { createRequire } = __require("module");
     const req = createRequire(import.meta.url);
     return req.resolve("@prismer/mcp-server");
   } catch {
   }
   try {
-    const here = dirname(fileURLToPath(import.meta.url));
-    const candidate = join(here, "../../mcp/dist/index.js");
+    const { fileURLToPath: fileURLToPath2 } = __require("url");
+    const { join: join15, dirname: dirname8 } = __require("path");
+    const here = dirname8(fileURLToPath2(import.meta.url));
+    const candidate = join15(here, "../../mcp/dist/index.js");
     if (existsSync(candidate)) return candidate;
-    const candidate2 = join(here, "../../../mcp/dist/index.js");
+    const candidate2 = join15(here, "../../../mcp/dist/index.js");
     if (existsSync(candidate2)) return candidate2;
-    const candidate3 = join(here, "../../../../mcp/dist/index.js");
+    const candidate3 = join15(here, "../../../../mcp/dist/index.js");
     if (existsSync(candidate3)) return candidate3;
   } catch {
   }
@@ -1521,29 +1461,25 @@ function runPythonJson(args, env, timeoutMs) {
     });
   });
 }
-function readHermesConfig(path9) {
-  if (!existsSync(path9)) return {};
+function readHermesConfig(path7) {
+  if (!existsSync(path7)) return {};
   try {
-    return YAML.parse(readFileSync(path9, "utf8")) ?? {};
+    return YAML.parse(readFileSync(path7, "utf8")) ?? {};
   } catch (err) {
-    throw new Error(`Failed to parse Hermes config at ${path9}: ${err.message}`);
+    throw new Error(`Failed to parse Hermes config at ${path7}: ${err.message}`);
   }
 }
-function writeEnvValue(path9, key, value) {
-  mkdirSync(dirname(path9), { recursive: true });
-  const lines = existsSync(path9) ? readFileSync(path9, "utf8").split(/\r?\n/) : [];
+function writeEnvValue(path7, key, value) {
+  mkdirSync(dirname(path7), { recursive: true });
+  const lines = existsSync(path7) ? readFileSync(path7, "utf8").split(/\r?\n/) : [];
   const next = lines.filter((line) => !line.startsWith(`${key}=`) && line.trim() !== "");
   next.push(`${key}=${quoteEnv(value)}`);
-  writeFileSync(path9, `${next.join("\n")}
+  writeFileSync(path7, `${next.join("\n")}
 `, "utf8");
 }
 function quoteEnv(value) {
   return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 }
-function getHermesProfileName(profile) {
-  const configured = profile.config && typeof profile.config.hermesProfileName === "string" ? profile.config.hermesProfileName : void 0;
-  return configured && configured !== "default" ? configured : profile.agentUsername || profile.id.slice(0, 8);
-}
 function getHermesProfileDir(profileName) {
   const root = process.env.HERMES_HOME || join(homedir(), ".hermes");
   if (!profileName || profileName === "default") return root;
@@ -1565,18 +1501,6 @@ function resolvePrismerProviderBaseUrl(config) {
 function resolvePrismerApiKey(config) {
   return process.env[config.prismerApiKeyEnv] || process.env.PRISMER_API_KEY || "";
 }
-function resolveMcpAllowlist(config) {
-  if (Array.isArray(config.mcpAllowlist)) return normalizeAllowlist(config.mcpAllowlist);
-  const prismerServer = config.roleTemplate?.mcpServers?.find((server) => {
-    const record = server;
-    return record.package === "@prismer/mcp-server" || record.name === "prismer-tasks";
-  });
-  if (!prismerServer) return null;
-  return Array.isArray(prismerServer.toolsAllowlist) ? normalizeAllowlist(prismerServer.toolsAllowlist) : null;
-}
-function normalizeAllowlist(values) {
-  return values.map((value) => value.trim()).filter(Boolean);
-}
 function normalizeProviderName(value) {
   return value.trim().toLowerCase().replace(/\s+/g, "-");
 }
@@ -1682,66 +1606,6 @@ async function waitForHealthy(baseUrl, apiKey, timeoutMs) {
   }
   throw new Error(`Hermes did not become healthy at ${baseUrl} within ${timeoutMs}ms`);
 }
-async function stopStaleHermesGateways(profileName, port, timeoutMs) {
-  const pids = findHermesGatewayPids(profileName, port);
-  for (const pid of pids) {
-    try {
-      process.kill(pid, "SIGTERM");
-    } catch {
-      continue;
-    }
-  }
-  const deadline = Date.now() + Math.min(timeoutMs, 5e3);
-  while (Date.now() < deadline) {
-    const alive = pids.filter(pidAlive);
-    if (alive.length === 0) return;
-    await new Promise((r) => setTimeout(r, 100));
-  }
-  for (const pid of pids) {
-    if (!pidAlive(pid)) continue;
-    try {
-      process.kill(pid, "SIGKILL");
-    } catch {
-    }
-  }
-}
-function findHermesGatewayPids(profileName, port) {
-  try {
-    const out = execFileSync("ps", ["-axo", "pid=,command="], { encoding: "utf8" });
-    const current = process.pid;
-    const escapedProfile = escapeRegExp(profileName);
-    const profilePattern = new RegExp(`(?:^|\\s)-p\\s+${escapedProfile}(?:\\s|$)`);
-    const portPattern = new RegExp(`(?:^|\\s)API_SERVER_PORT=${port}(?:\\s|$)`);
-    return out.split(/\r?\n/).map((line) => {
-      const trimmed = line.trim();
-      const match = /^(\d+)\s+(.+)$/.exec(trimmed);
-      if (!match) return null;
-      const pid = Number.parseInt(match[1], 10);
-      const command = match[2];
-      if (!Number.isFinite(pid) || pid === current) return null;
-      if (!isHermesGatewayCommand(command)) return null;
-      if (!profilePattern.test(command) && !portPattern.test(command)) return null;
-      return pid;
-    }).filter((pid) => pid !== null);
-  } catch {
-    return [];
-  }
-}
-function isHermesGatewayCommand(command) {
-  if (!/\bgateway\b/.test(command) || !/\brun\b/.test(command)) return false;
-  return /(^|\s)(?:\S*\/)?hermes(?:\s|$)/.test(command);
-}
-function pidAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function escapeRegExp(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
 
 // src/daemon/ws-client.ts
 import { EventEmitter } from "events";
@@ -1981,11 +1845,11 @@ var MIGRATIONS = [
 function runSql(db, sql) {
   db["exec"](sql);
 }
-function openLocalDb(path9) {
-  if (path9 !== ":memory:" && !existsSync2(dirname2(path9))) {
-    mkdirSync2(dirname2(path9), { recursive: true });
+function openLocalDb(path7) {
+  if (path7 !== ":memory:" && !existsSync2(dirname2(path7))) {
+    mkdirSync2(dirname2(path7), { recursive: true });
   }
-  const db = new Database2(path9);
+  const db = new Database2(path7);
   db.pragma("journal_mode = WAL");
   db.pragma("foreign_keys = ON");
   runMigrations(db);
@@ -2303,12 +2167,11 @@ function deriveWsUrl(httpBase) {
 }
 
 // src/daemon-id.ts
-import { randomBytes } from "crypto";
 import { hostname } from "os";
 var PREFIX = "daemon-";
 function newDaemonId() {
   const host = hostname().replace(/[^a-zA-Z0-9_-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "") || "unknown";
-  return `${PREFIX}${host}-${randomBytes(6).toString("hex")}`;
+  return `${PREFIX}${host}`;
 }
 function isDaemonId(s) {
   return s.startsWith(PREFIX) && s.length > PREFIX.length;
@@ -2323,8 +2186,8 @@ var CloudClient = class {
   opts;
   fetchImpl;
   /** Low-level request. Caller decides on retry; sync-worker handles backoff. */
-  async request(method, path9, init) {
-    const url = this.urlFor(path9);
+  async request(method, path7, init) {
+    const url = this.urlFor(path7);
     const headers = {
       "Content-Type": "application/json",
       Accept: "application/json",
@@ -2383,8 +2246,8 @@ var CloudClient = class {
     return { ok: true, status: res.status, data: body ?? void 0 };
   }
   /** Convenience: GET expecting `{ ok, data }` envelope. Returns `data` or throws. */
-  async get(path9, opts) {
-    const res = await this.request("GET", path9, opts);
+  async get(path7, opts) {
+    const res = await this.request("GET", path7, opts);
     if (!res.ok) throw new CloudError(res.status, res.error?.code ?? "unknown", res.error?.message ?? "request failed");
     if (res.data && typeof res.data === "object" && "ok" in res.data) {
       const env = res.data;
@@ -2393,14 +2256,14 @@ var CloudClient = class {
     }
     return res.data;
   }
-  urlFor(path9) {
+  urlFor(path7) {
     const trimmedBase = this.opts.baseUrl.replace(/\/$/, "");
-    const trimmedPath = path9.startsWith("/") ? path9 : `/${path9}`;
+    const trimmedPath = path7.startsWith("/") ? path7 : `/${path7}`;
     return `${trimmedBase}${trimmedPath}`;
   }
   /** Raw byte download (for asset cache). Returns response so caller can stream body. */
-  async fetchRaw(path9, init) {
-    const url = this.urlFor(path9);
+  async fetchRaw(path7, init) {
+    const url = this.urlFor(path7);
     const headers = {
       Authorization: `Bearer ${this.opts.apiKey}`,
       ...init?.headers ?? {}
@@ -2449,8 +2312,7 @@ function envelope(type, payload, requestId) {
 }
 
 // src/asset-cache.ts
-import { createHash } from "crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync3, renameSync, statSync, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync4, statSync, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
 import { dirname as dirname4, join as join3 } from "path";
 function rowToCached(row) {
   return {
@@ -2543,17 +2405,11 @@ var AssetCache = class {
       throw new Error(`Asset bytes fetch failed for ${hash} (id=${assetId}): HTTP ${res.status}`);
     }
     const buf = Buffer.from(await res.arrayBuffer());
-    const actualHash = sha256(buf);
-    if (actualHash !== hash) {
-      throw new Error(`Asset hash mismatch for ${hash}: downloaded ${actualHash}`);
-    }
     const localPath = this.pathFor(hash);
     if (!existsSync4(dirname4(localPath))) {
       mkdirSync4(dirname4(localPath), { recursive: true });
     }
-    const tmpPath = `${localPath}.${process.pid}.${Date.now()}.tmp`;
-    writeFileSync3(tmpPath, buf);
-    renameSync(tmpPath, localPath);
+    writeFileSync3(localPath, buf);
     const mime = res.headers.get("content-type");
     const now = Date.now();
     this.db.prepare(
@@ -2574,10 +2430,6 @@ var AssetCache = class {
   }
   /** Insert an already-on-disk asset into the cache (e.g., asset just produced by adapter). */
   registerLocal(hash, localPath, mime) {
-    const actualHash = sha256(readFileBuffer(localPath));
-    if (actualHash !== hash) {
-      throw new Error(`Asset hash mismatch for ${hash}: local file is ${actualHash}`);
-    }
     const size = statSync(localPath).size;
     const now = Date.now();
     this.db.prepare(
@@ -2617,15 +2469,9 @@ var AssetCache = class {
     return { removed, freed };
   }
 };
-function sha256(buf) {
-  return createHash("sha256").update(buf).digest("hex");
-}
-function readFileBuffer(path9) {
-  return readFileSync3(path9);
-}
 
 // src/daemon/asset/mirror.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync3, writeFileSync as writeFileSync4 } from "fs";
 import { join as join4 } from "path";
 function rowToBinding(row) {
   return {
@@ -2656,7 +2502,7 @@ var WorkspaceMirror = class {
   readCursor() {
     if (!existsSync5(this.cursorPath)) return null;
     try {
-      const parsed = JSON.parse(readFileSync4(this.cursorPath, "utf8"));
+      const parsed = JSON.parse(readFileSync3(this.cursorPath, "utf8"));
       if (parsed.workspaceId !== this.workspaceId) return null;
       return parsed.cursor;
     } catch {
@@ -2719,8 +2565,8 @@ var WorkspaceMirror = class {
     return { applied, cursor: envelope2.cursor };
   }
   /** Lookup the active binding for a workspace path. Returns undefined if not mirrored. */
-  lookupByPath(path9) {
-    const row = this.db.prepare("SELECT * FROM workspace_files_mirror WHERE workspace_id = ? AND path = ?").get(this.workspaceId, path9);
+  lookupByPath(path7) {
+    const row = this.db.prepare("SELECT * FROM workspace_files_mirror WHERE workspace_id = ? AND path = ?").get(this.workspaceId, path7);
     return row ? rowToBinding(row) : void 0;
   }
   /** Find an asset's contentHash via any path binding (asset may map to many paths). */
@@ -2982,20 +2828,20 @@ var UriResolver = class {
     }
     return { texts: all, resolvedHashes: dedupe(allHashes) };
   }
-  async lookupFile(workspaceId, path9, signal) {
+  async lookupFile(workspaceId, path7, signal) {
     const local = this.db.prepare(
       "SELECT asset_id, content_hash, version FROM workspace_files_mirror WHERE workspace_id = ? AND path = ?"
-    ).get(workspaceId, path9);
+    ).get(workspaceId, path7);
     if (local) return local;
     const remote = await this.cloud.get(
-      `/api/im/workspaces/${encodeURIComponent(workspaceId)}/files?path=${encodeURIComponent(path9)}`,
+      `/api/im/workspaces/${encodeURIComponent(workspaceId)}/files?path=${encodeURIComponent(path7)}`,
       { signal }
     );
     this.db.prepare(
       `INSERT OR REPLACE INTO workspace_files_mirror
          (workspace_id, path, asset_id, content_hash, version, synced_at, dirty)
          VALUES (?, ?, ?, ?, ?, ?, 0)`
-    ).run(workspaceId, path9, remote.assetId, remote.contentHash, remote.version, Date.now());
+    ).run(workspaceId, path7, remote.assetId, remote.contentHash, remote.version, Date.now());
     return { asset_id: remote.assetId, content_hash: remote.contentHash, version: remote.version };
   }
 };
@@ -3004,244 +2850,11 @@ function dedupe(xs) {
 }
 
 // src/daemon/dispatch.ts
-import { readFileSync as readFileSync5, promises as fsp2 } from "fs";
+import { readFileSync as readFileSync4, promises as fsp } from "fs";
 import * as path from "path";
-
-// src/daemon/skill-sync.ts
-import { promises as fsp } from "fs";
-import { join as join6 } from "path";
-import { createHash as createHash2 } from "crypto";
-
-// src/adapters/openclaw/index.ts
-import { z as z3 } from "zod";
-import { homedir as homedir3 } from "os";
-import { join as join5 } from "path";
-var OpenClawProfileConfigSchema = z3.object({
-  /** OpenClaw chat-completions HTTP port. */
-  port: z3.number().int().min(1).max(65535).default(18789),
-  /** Bearer token expected by the gateway (from gateway.auth.bearerTokens). */
-  apiKey: z3.string().min(1),
-  /**
-   * Model field passed to OpenClaw's /v1/chat/completions. OpenClaw
-   * intercepts this differently from a vanilla OpenAI server: the value
-   * MUST be `openclaw` (or `openclaw/<agentId>`) — it picks which
-   * OpenClaw agent answers, NOT the underlying LLM. The LLM is selected
-   * by `agents.defaults.model.primary` in openclaw.json (e.g.
-   * `prismer/us-kimi-k2.5`, set by the bootstrap).
-   */
-  model: z3.string().min(1).default("openclaw"),
-  mcpAllowlist: z3.array(z3.string()).nullable().optional(),
-  approvalPolicy: z3.enum(["strict", "auto-low-risk", "autonomous"]).optional().default("auto-low-risk"),
-  roleTemplate: z3.object({
-    mcpServers: z3.array(z3.object({ toolsAllowlist: z3.array(z3.string()).optional() }).passthrough()).optional()
-  }).passthrough().optional(),
-  skillsDir: z3.string().optional()
-});
-var openclawAdapter = {
-  name: "openclaw",
-  kind: "long-running",
-  capabilities: ["chat", "code", "multi-channel"],
-  workspaceSchema: OpenClawProfileConfigSchema,
-  validate(config) {
-    const r = OpenClawProfileConfigSchema.safeParse(config);
-    if (r.success) return { ok: true };
-    return {
-      ok: false,
-      errors: r.error.issues.map((i) => `${i.path.join(".") || "<root>"}: ${i.message}`)
-    };
-  },
-  async ensureService(profile) {
-    const config = OpenClawProfileConfigSchema.parse(profile.config);
-    const baseUrl = `http://127.0.0.1:${config.port}`;
-    if (!await checkHealth2(baseUrl, config.apiKey)) {
-      throw new Error(
-        `OpenClaw gateway not reachable at ${baseUrl}. Start it with:
-  openclaw gateway --port ${config.port}`
-      );
-    }
-    return new OpenClawService(baseUrl, config.apiKey, config.model, resolveOpenClawSkillsDir(profile, config));
-  },
-  async health() {
-    return { available: true };
-  }
-};
-var OpenClawService = class {
-  constructor(baseUrl, apiKey, model, skillsDir) {
-    this.baseUrl = baseUrl;
-    this.apiKey = apiKey;
-    this.model = model;
-    this.skillsDir = skillsDir;
-    this.id = baseUrl;
-  }
-  baseUrl;
-  apiKey;
-  model;
-  skillsDir;
-  id;
-  async healthy() {
-    return checkHealth2(this.baseUrl, this.apiKey);
-  }
-  async dispatch(task) {
-    const startedAt = Date.now();
-    const systemPrompt = typeof task.metadata?.systemPrompt === "string" ? task.metadata.systemPrompt : void 0;
-    const messages = [];
-    if (systemPrompt) messages.push({ role: "system", content: systemPrompt });
-    messages.push({ role: "user", content: task.prompt });
-    try {
-      const res = await fetch(`${this.baseUrl}/v1/chat/completions`, {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${this.apiKey}`,
-          "Content-Type": "application/json"
-        },
-        body: JSON.stringify({
-          model: this.model,
-          messages,
-          stream: false
-        }),
-        signal: task.signal
-      });
-      if (!res.ok) {
-        const body = await res.text().catch(() => "") ?? "";
-        return {
-          ok: false,
-          error: {
-            code: res.status === 401 || res.status === 403 ? "auth_invalid" : "adapter_dispatch_failed",
-            message: `OpenClaw ${res.status}: ${body.slice(0, 400)}`
-          }
-        };
-      }
-      const json = await res.json();
-      let output = json.choices?.[0]?.message?.content ?? "";
-      const ERR_PREFIX_RE = /^Cannot read properties of undefined \(reading '[^']+'\)\s*\n+/;
-      if (ERR_PREFIX_RE.test(output)) {
-        process.stderr.write(
-          `[openclaw-adapter] stripping known stderr-bleed prefix from chat output (OpenClaw 2026.4.x bug)
-`
-        );
-        output = output.replace(ERR_PREFIX_RE, "");
-      }
-      return {
-        ok: true,
-        output,
-        metrics: { durationMs: Date.now() - startedAt }
-      };
-    } catch (err) {
-      if (task.signal?.aborted || err?.name === "AbortError") {
-        return { ok: false, error: { code: "task_cancelled", message: "Task cancelled by client" } };
-      }
-      return {
-        ok: false,
-        error: { code: "adapter_dispatch_failed", message: err.message }
-      };
-    }
-  }
-};
-function getOpenClawSkillsDir(profile) {
-  const config = OpenClawProfileConfigSchema.parse(profile.config);
-  return resolveOpenClawSkillsDir(profile, config);
-}
-function resolveOpenClawSkillsDir(profile, config) {
-  if (config.skillsDir) return config.skillsDir;
-  const name = profile.agentUsername || profile.id.slice(0, 8);
-  return join5(process.env.OPENCLAW_HOME || join5(homedir3(), ".openclaw"), "profiles", name, "skills");
-}
-async function checkHealth2(baseUrl, apiKey) {
-  try {
-    const res = await fetch(`${baseUrl}/health`, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(2e3)
-    });
-    return res.ok;
-  } catch {
-    return false;
-  }
-}
-
-// src/daemon/skill-sync.ts
-async function syncInstalledSkillsForDispatch(profile, agentImUserId, cloud, signal) {
-  if (!agentImUserId) return { synced: 0, skipped: 0, unchanged: 0 };
-  const data = await cloud.get(
-    `/api/im/skills/installed?agentId=${encodeURIComponent(agentImUserId)}`,
-    { signal }
-  );
-  const entries = normalizeInstalledSkills(data);
-  const skillsRoot = resolveSkillsRoot(profile);
-  if (!skillsRoot) return { synced: 0, skipped: 0, unchanged: 0 };
-  let synced = 0;
-  let skipped = 0;
-  let unchanged = 0;
-  for (const entry of entries) {
-    const slug = sanitizeSlug(trimmedStringFrom(entry.skill?.slug) ?? trimmedStringFrom(entry.slug));
-    const content = contentStringFrom(entry.skill?.content) ?? contentStringFrom(entry.content);
-    if (!slug || !content) {
-      skipped++;
-      if (slug && !content) {
-        process.stderr.write(`[daemon] skill sync skipped ${slug}: missing content
-`);
-      }
-      continue;
-    }
-    const skillDir = join6(skillsRoot, slug);
-    await fsp.mkdir(skillDir, { recursive: true });
-    const target = join6(skillDir, "SKILL.md");
-    const existing = await fsp.readFile(target, "utf8").catch(() => null);
-    if (existing != null && sha2562(existing) === sha2562(content)) {
-      unchanged++;
-      continue;
-    }
-    await fsp.writeFile(target, content, "utf8");
-    synced++;
-  }
-  return { synced, skipped, unchanged };
-}
-function resolveSkillsRoot(profile) {
-  if (profile.adapterName === "hermes") return join6(getHermesProfileDir(getHermesProfileName(profile)), "skills");
-  if (profile.adapterName === "openclaw") return getOpenClawSkillsDir(profile);
-  return null;
-}
-function sha2562(value) {
-  return createHash2("sha256").update(value).digest("hex");
-}
-function normalizeInstalledSkills(data) {
-  if (Array.isArray(data)) return data.filter(isInstalledSkillEntry);
-  if (!data || typeof data !== "object" || Array.isArray(data)) return [];
-  const record = data;
-  const nested = record.data;
-  if (Array.isArray(nested)) return nested.filter(isInstalledSkillEntry);
-  if (nested && typeof nested === "object" && !Array.isArray(nested)) {
-    const skills2 = nested.skills;
-    if (Array.isArray(skills2)) return skills2.filter(isInstalledSkillEntry);
-  }
-  const skills = record.skills;
-  if (Array.isArray(skills)) return skills.filter(isInstalledSkillEntry);
-  return [];
-}
-function isInstalledSkillEntry(value) {
-  return Boolean(value && typeof value === "object" && !Array.isArray(value));
-}
-function trimmedStringFrom(value) {
-  return typeof value === "string" && value.trim() ? value.trim() : void 0;
-}
-function contentStringFrom(value) {
-  return typeof value === "string" && value.trim() ? value : void 0;
-}
-function sanitizeSlug(value) {
-  if (!value) return void 0;
-  const safe = value.replace(/[^a-zA-Z0-9_-]/g, "");
-  return safe || void 0;
-}
-
-// src/daemon/dispatch.ts
 var DEFAULT_CONTEXT_MAX = 8e3;
 var GOAL_CONTEXT_MAX = 4;
 var MEMORY_DIGEST_MAX_BYTES = 4e3;
-var DEFAULT_OPERATING_PRINCIPLES = [
-  "- Decide and act; only request human approval for destructive operations or irreversible external effects.",
-  "- Assignable work should become explicit tasks; do not leave concrete work as chat discussion only.",
-  "- Use workspace asset tools for uploaded files: search/describe first, then read bounded ranges; do not claim file contents unless a tool call succeeded.",
-  "- Keep users informed with concise status and concrete next steps."
-].join("\n");
 var ASSET_INLINE_FULL_MAX_BYTES = 64 * 1024;
 var ASSET_INLINE_TRUNCATE_BYTES = 16 * 1024;
 async function handleDispatch(payload, requestId, deps) {
@@ -3252,7 +2865,7 @@ async function handleDispatch(payload, requestId, deps) {
   const outboxDir = outboxBase ? path.join(outboxBase, "_outbox") : null;
   if (outboxDir) {
     try {
-      await fsp2.mkdir(outboxDir, { recursive: true });
+      await fsp.mkdir(outboxDir, { recursive: true });
     } catch (err) {
       process.stderr.write(
         `[daemon] outbox provision failed task=${taskId} dir=${outboxDir}: ${err.message}
@@ -3279,18 +2892,6 @@ async function handleDispatch(payload, requestId, deps) {
       sendReply(deps.ws, reply, requestId);
       return reply;
     }
-    try {
-      const skillSync = await syncInstalledSkillsForDispatch(profile, agentImUserId, deps.cloud, deps.signal);
-      if (skillSync.synced > 0 || skillSync.skipped > 0) {
-        process.stderr.write(
-          `[daemon] skill sync profile=${profile.id} adapter=${profile.adapterName} synced=${skillSync.synced} skipped=${skillSync.skipped}
-`
-        );
-      }
-    } catch (err) {
-      process.stderr.write(`[daemon] skill sync skipped profile=${profile.id}: ${err.message}
-`);
-    }
     let hashRefResult = { text: payload.prompt, resolutions: [] };
     if (deps.assetMetadataIndexes && profile.workspaceId) {
       const assetIndex = deps.assetMetadataIndexes.get(profile.workspaceId);
@@ -3340,7 +2941,6 @@ async function handleDispatch(payload, requestId, deps) {
 `
       );
     }
-    const operatingPrinciples = resolveOperatingPrinciples(profile.config);
     const taskInput = {
       taskId,
       prompt: adapterPrompt,
@@ -3349,7 +2949,6 @@ async function handleDispatch(payload, requestId, deps) {
         conversationId: payload.conversationId,
         prismerGoals: goalContext.map(toGoalMirrorPayload),
         ...profileSystemPrompt ? { systemPrompt: profileSystemPrompt } : {},
-        ...operatingPrinciples ? { operatingPrinciples } : {},
         // Wave-9: spawn-style adapters (claude-code, codex, openclaw) read
         // this and inject `PRISMER_OUTBOX_DIR=<abs>` into the child env so
         // the LLM tool can resolve the path even if it doesn't read the
@@ -3620,7 +3219,7 @@ async function resolveAssetRefs(refs, cache) {
     const inlineCandidate = isTextLikeMime(effectiveMime);
     if (inlineCandidate) {
       try {
-        const buf = readFileSync5(cached.localPath);
+        const buf = readFileSync4(cached.localPath);
         let strategy;
         let body;
         if (buf.byteLength <= ASSET_INLINE_FULL_MAX_BYTES) {
@@ -3694,36 +3293,6 @@ ${memory.digest.trim()}
 
 ${prompt}`;
 }
-function resolveOperatingPrinciples(config) {
-  const cfg = readRecord(config);
-  const roleTemplate = readRecord(cfg.roleTemplate);
-  const principles = stringifyPrinciples(cfg.operatingPrinciples) ?? stringifyPrinciples(roleTemplate.operatingPrinciples) ?? DEFAULT_OPERATING_PRINCIPLES;
-  const policy = typeof cfg.approvalPolicy === "string" ? cfg.approvalPolicy : roleTemplate.approvalPolicy;
-  if (policy === "strict") {
-    return `${principles}
-- Approval policy: strict. Request human approval before destructive, external, spend, access, or publish operations.`;
-  }
-  if (policy === "autonomous") {
-    return `${principles}
-- Approval policy: autonomous. Do not request human approval unless a platform policy explicitly requires it.`;
-  }
-  return `${principles}
-- Approval policy: auto-low-risk. Proceed on reversible low-risk work; request human approval for destructive or irreversible operations.`;
-}
-function stringifyPrinciples(value) {
-  if (typeof value === "string" && value.trim()) return value.trim();
-  if (value && typeof value === "object" && !Array.isArray(value)) {
-    const record = value;
-    for (const key of ["en", "zh"]) {
-      const text = record[key];
-      if (typeof text === "string" && text.trim()) return text.trim();
-    }
-    for (const text of Object.values(record)) {
-      if (typeof text === "string" && text.trim()) return text.trim();
-    }
-  }
-  return void 0;
-}
 function appendOutboxInstruction(prompt, outboxDir, profileConfig) {
   if (!outboxDir) return prompt;
   if (profileConfig?.disableOutboxHints === true) return prompt;
@@ -3742,9 +3311,6 @@ function appendChannelContext(prompt, payload, profile) {
   const type = payload.conversationType === "direct" || payload.conversationType === "group" ? payload.conversationType : "unknown";
   const youAre = profile.agentUsername || payload.agentImUserId || "this agent";
   const lines = ["[Channel context]", `Conversation type: ${type}`, `You are: ${youAre}`];
-  if (payload.conversationId) {
-    lines.push(`Conversation ID: ${payload.conversationId}`);
-  }
   const participants = Array.isArray(payload.participants) ? payload.participants : [];
   if (participants.length > 0) {
     if (type === "direct") {
@@ -4014,7 +3580,7 @@ var ServicePool = class {
 
 // src/daemon/local-server.ts
 import { createServer } from "http";
-import { randomUUID, createHash as createHash3 } from "crypto";
+import { randomUUID, createHash } from "crypto";
 import { promises as fs } from "fs";
 import * as path2 from "path";
 var LocalServer = class {
@@ -4322,10 +3888,10 @@ async function walkAndDigest(root, current) {
     }
     if (!st.isFile()) continue;
     const buf = await fs.readFile(full);
-    const sha2564 = createHash3("sha256").update(buf).digest("hex");
+    const sha2562 = createHash("sha256").update(buf).digest("hex");
     out.push({
       path: rel,
-      sha256: sha2564,
+      sha256: sha2562,
       sizeBytes: st.size,
       mtime: Math.floor(st.mtimeMs)
     });
@@ -4335,14 +3901,12 @@ async function walkAndDigest(root, current) {
 
 // src/daemon/runner.ts
 import { EventEmitter as EventEmitter3 } from "events";
-import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
-import { mkdir } from "fs/promises";
-import { homedir as homedir6, platform } from "os";
-import { join as join13 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync6 } from "fs";
+import { platform } from "os";
 
 // src/adapters/claude-code/index.ts
 import { spawn as spawn2, spawnSync } from "child_process";
-import { z as z4 } from "zod";
+import { z as z3 } from "zod";
 
 // src/adapters/claude-code/output-parser.ts
 var MAX_OUTPUT_CHARS = 64 * 1024;
@@ -4374,28 +3938,28 @@ function parseHeadlessOutput(stdout) {
 }
 
 // src/adapters/claude-code/index.ts
-var McpServerSchema = z4.object({
-  name: z4.string(),
-  command: z4.string(),
-  args: z4.array(z4.string()).optional(),
-  env: z4.record(z4.string(), z4.string()).optional()
+var McpServerSchema = z3.object({
+  name: z3.string(),
+  command: z3.string(),
+  args: z3.array(z3.string()).optional(),
+  env: z3.record(z3.string(), z3.string()).optional()
 });
-var CCConfigSchema = z4.object({
-  cwd: z4.string().min(1),
+var CCConfigSchema = z3.object({
+  cwd: z3.string().min(1),
   // claude 2.x accepts aliases ('sonnet', 'haiku', 'opus') and full ids
   // (e.g. 'claude-sonnet-4-6'). The 1.x default 'claude-3-5-sonnet' is no
   // longer a valid model id under the current CLI.
-  model: z4.string().default("sonnet"),
-  systemPrompt: z4.string().optional(),
-  envVars: z4.record(z4.string(), z4.string()).optional(),
-  mcpServers: z4.array(McpServerSchema).optional(),
-  allowedTools: z4.array(z4.string()).optional(),
-  maxTurns: z4.number().int().positive().default(20),
+  model: z3.string().default("sonnet"),
+  systemPrompt: z3.string().optional(),
+  envVars: z3.record(z3.string(), z3.string()).optional(),
+  mcpServers: z3.array(McpServerSchema).optional(),
+  allowedTools: z3.array(z3.string()).optional(),
+  maxTurns: z3.number().int().positive().default(20),
   // External-model route (1.9.x extension — optional, no breaking change)
-  baseURL: z4.string().url().optional(),
-  apiKeyRef: z4.string().regex(/^(env|keychain):[A-Za-z0-9_][A-Za-z0-9_.\-]*$/).optional(),
+  baseURL: z3.string().url().optional(),
+  apiKeyRef: z3.string().regex(/^(env|keychain):[A-Za-z0-9_][A-Za-z0-9_.\-]*$/).optional(),
   // informational tag — dispatch does not branch on this value yet
-  route: z4.enum(["default", "prismer", "omniroute"]).default("default")
+  route: z3.enum(["default", "prismer", "omniroute"]).default("default")
 });
 var claudeCodeAdapter = {
   name: "claude-code",
@@ -4549,7 +4113,7 @@ function resolveKeyRef(ref) {
 
 // src/adapters/codex/index.ts
 import { spawn as spawn3 } from "child_process";
-import { z as z5 } from "zod";
+import { z as z4 } from "zod";
 
 // src/skills/memory-curation.ts
 var MEMORY_CURATION_SKILL_TEXT = `---
@@ -4682,31 +4246,31 @@ If the answer is no, do not save.
 `;
 
 // src/adapters/codex/index.ts
-var CodexConfigSchema = z5.object({
+var CodexConfigSchema = z4.object({
   /** Working directory for the codex subprocess. */
-  cwd: z5.string().min(1),
+  cwd: z4.string().min(1),
   /**
    * Model identifier passed to --model (e.g. 'codex-mini-latest', 'o4-mini').
    * Default matches the Codex CLI built-in default as of 2026-05.
    */
-  model: z5.string().default("codex-mini-latest"),
+  model: z4.string().default("codex-mini-latest"),
   /**
    * Sandbox level for the codex subprocess.
    *   read-only         — analysis only; code-gen tasks will stall
    *   workspace-write   — write inside cwd, read-only outside (recommended)
    *   danger-full-access — no restrictions; safe only inside isolated containers
    */
-  sandbox: z5.enum(["read-only", "workspace-write", "danger-full-access"]).default("workspace-write"),
+  sandbox: z4.enum(["read-only", "workspace-write", "danger-full-access"]).default("workspace-write"),
   /** Optional system prompt prepended to the user prompt as a preamble (see U4). */
-  systemPrompt: z5.string().optional(),
+  systemPrompt: z4.string().optional(),
   /** Extra env vars merged into the codex subprocess environment. */
-  envVars: z5.record(z5.string(), z5.string()).optional(),
+  envVars: z4.record(z4.string(), z4.string()).optional(),
   /**
    * Name of the env var holding the OpenAI API key. Defaults to
    * 'OPENAI_API_KEY' (Codex CLI default). Override if using a workspace-
    * scoped key under a different name.
    */
-  apiKeyEnv: z5.string().default("OPENAI_API_KEY")
+  apiKeyEnv: z4.string().default("OPENAI_API_KEY")
 });
 function buildCodexPrompt(config, taskPrompt) {
   const preambleParts = [MEMORY_CURATION_SKILL_TEXT.trim()];
@@ -4854,33 +4418,160 @@ var codexAdapter = {
   }
 };
 
-// src/daemon/memory/runtime.ts
-import * as os from "os";
-import * as path4 from "path";
-
-// src/daemon/memory/store.ts
-import Database3 from "better-sqlite3";
-import * as fs2 from "fs";
-import * as path3 from "path";
-import { randomUUID as randomUUID2, createHash as createHash4 } from "crypto";
-
-// src/daemon/memory/crypto.ts
-function sealPlaintext(content) {
-  return { kind: "inline", content };
-}
-
-// src/daemon/memory/store.ts
-var SCHEMA_VERSION2 = 1;
-var SCHEMA_V1_STATEMENTS = [
-  `CREATE TABLE IF NOT EXISTS memory_schema_version (
-     version INTEGER PRIMARY KEY
-   )`,
-  `CREATE TABLE IF NOT EXISTS memory_pages (
-     id TEXT PRIMARY KEY,
-     workspaceId TEXT NOT NULL,
-     path TEXT NOT NULL,
-     title TEXT,
-     description TEXT,
+// src/adapters/openclaw/index.ts
+import { z as z5 } from "zod";
+var OpenClawProfileConfigSchema = z5.object({
+  /** OpenClaw chat-completions HTTP port. */
+  port: z5.number().int().min(1).max(65535).default(18789),
+  /** Bearer token expected by the gateway (from gateway.auth.bearerTokens). */
+  apiKey: z5.string().min(1),
+  /**
+   * Model field passed to OpenClaw's /v1/chat/completions. OpenClaw
+   * intercepts this differently from a vanilla OpenAI server: the value
+   * MUST be `openclaw` (or `openclaw/<agentId>`) — it picks which
+   * OpenClaw agent answers, NOT the underlying LLM. The LLM is selected
+   * by `agents.defaults.model.primary` in openclaw.json (e.g.
+   * `prismer/us-kimi-k2.5`, set by the bootstrap).
+   */
+  model: z5.string().min(1).default("openclaw")
+});
+var openclawAdapter = {
+  name: "openclaw",
+  kind: "long-running",
+  capabilities: ["chat", "code", "multi-channel"],
+  workspaceSchema: OpenClawProfileConfigSchema,
+  validate(config) {
+    const r = OpenClawProfileConfigSchema.safeParse(config);
+    if (r.success) return { ok: true };
+    return {
+      ok: false,
+      errors: r.error.issues.map((i) => `${i.path.join(".") || "<root>"}: ${i.message}`)
+    };
+  },
+  async ensureService(profile) {
+    const config = OpenClawProfileConfigSchema.parse(profile.config);
+    const baseUrl = `http://127.0.0.1:${config.port}`;
+    if (!await checkHealth2(baseUrl, config.apiKey)) {
+      throw new Error(
+        `OpenClaw gateway not reachable at ${baseUrl}. Start it with:
+  openclaw gateway --port ${config.port}`
+      );
+    }
+    return new OpenClawService(baseUrl, config.apiKey, config.model);
+  },
+  async health() {
+    return { available: true };
+  }
+};
+var OpenClawService = class {
+  constructor(baseUrl, apiKey, model) {
+    this.baseUrl = baseUrl;
+    this.apiKey = apiKey;
+    this.model = model;
+    this.id = baseUrl;
+  }
+  baseUrl;
+  apiKey;
+  model;
+  id;
+  async healthy() {
+    return checkHealth2(this.baseUrl, this.apiKey);
+  }
+  async dispatch(task) {
+    const startedAt = Date.now();
+    const systemPrompt = typeof task.metadata?.systemPrompt === "string" ? task.metadata.systemPrompt : void 0;
+    const messages = [];
+    if (systemPrompt) messages.push({ role: "system", content: systemPrompt });
+    messages.push({ role: "user", content: task.prompt });
+    try {
+      const res = await fetch(`${this.baseUrl}/v1/chat/completions`, {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${this.apiKey}`,
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          model: this.model,
+          messages,
+          stream: false
+        }),
+        signal: task.signal
+      });
+      if (!res.ok) {
+        const body = await res.text().catch(() => "") ?? "";
+        return {
+          ok: false,
+          error: {
+            code: res.status === 401 || res.status === 403 ? "auth_invalid" : "adapter_dispatch_failed",
+            message: `OpenClaw ${res.status}: ${body.slice(0, 400)}`
+          }
+        };
+      }
+      const json = await res.json();
+      let output = json.choices?.[0]?.message?.content ?? "";
+      const ERR_PREFIX_RE = /^Cannot read properties of undefined \(reading '[^']+'\)\s*\n+/;
+      if (ERR_PREFIX_RE.test(output)) {
+        process.stderr.write(
+          `[openclaw-adapter] stripping known stderr-bleed prefix from chat output (OpenClaw 2026.4.x bug)
+`
+        );
+        output = output.replace(ERR_PREFIX_RE, "");
+      }
+      return {
+        ok: true,
+        output,
+        metrics: { durationMs: Date.now() - startedAt }
+      };
+    } catch (err) {
+      if (task.signal?.aborted || err?.name === "AbortError") {
+        return { ok: false, error: { code: "task_cancelled", message: "Task cancelled by client" } };
+      }
+      return {
+        ok: false,
+        error: { code: "adapter_dispatch_failed", message: err.message }
+      };
+    }
+  }
+};
+async function checkHealth2(baseUrl, apiKey) {
+  try {
+    const res = await fetch(`${baseUrl}/health`, {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: AbortSignal.timeout(2e3)
+    });
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+
+// src/daemon/memory/runtime.ts
+import * as os from "os";
+import * as path4 from "path";
+
+// src/daemon/memory/store.ts
+import Database3 from "better-sqlite3";
+import * as fs2 from "fs";
+import * as path3 from "path";
+import { randomUUID as randomUUID2, createHash as createHash2 } from "crypto";
+
+// src/daemon/memory/crypto.ts
+function sealPlaintext(content) {
+  return { kind: "inline", content };
+}
+
+// src/daemon/memory/store.ts
+var SCHEMA_VERSION2 = 1;
+var SCHEMA_V1_STATEMENTS = [
+  `CREATE TABLE IF NOT EXISTS memory_schema_version (
+     version INTEGER PRIMARY KEY
+   )`,
+  `CREATE TABLE IF NOT EXISTS memory_pages (
+     id TEXT PRIMARY KEY,
+     workspaceId TEXT NOT NULL,
+     path TEXT NOT NULL,
+     title TEXT,
+     description TEXT,
      contentHash TEXT NOT NULL,
      version INTEGER NOT NULL DEFAULT 1,
      pageType TEXT NOT NULL DEFAULT 'leaf',
@@ -5013,9 +4704,9 @@ var MemoryStore = class {
     const row = db.prepare("SELECT * FROM memory_pages WHERE workspaceId = ? AND id = ?").get(this.opts.workspaceId, pageId);
     return row ? this.rowToPage(row) : null;
   }
-  loadContent(pageId, version) {
+  loadContent(pageId, version2) {
     const db = this.requireDb();
-    const targetVersion = version ?? db.prepare("SELECT version FROM memory_pages WHERE workspaceId = ? AND id = ?").get(this.opts.workspaceId, pageId)?.version;
+    const targetVersion = version2 ?? db.prepare("SELECT version FROM memory_pages WHERE workspaceId = ? AND id = ?").get(this.opts.workspaceId, pageId)?.version;
     if (targetVersion === void 0) return null;
     const row = db.prepare(
       `SELECT c.pageId, c.version, c.payloadKind, c.payloadValue
@@ -5053,7 +4744,7 @@ var MemoryStore = class {
     }
     const db = this.requireDb();
     const now = Date.now();
-    const contentHash = sha2563(input.content);
+    const contentHash = sha256(input.content);
     const payload = sealPlaintext(input.content);
     if (payload.kind !== "inline") {
       throw new Error("MemoryStore.write: non-inline payload not yet supported in phase-0");
@@ -5247,8 +4938,8 @@ var MemoryStore = class {
     };
   }
 };
-function sha2563(s) {
-  return createHash4("sha256").update(s, "utf8").digest("hex");
+function sha256(s) {
+  return createHash2("sha256").update(s, "utf8").digest("hex");
 }
 
 // src/daemon/memory/search.ts
@@ -6106,8 +5797,8 @@ function finalizeSelected(runtime, workspaceId, paths, snippetMaxBytes = DEFAULT
   const slot = runtime.peek(workspaceId);
   if (!slot) return [];
   const out = [];
-  for (const path9 of paths) {
-    const page = slot.store.loadByPath(path9);
+  for (const path7 of paths) {
+    const page = slot.store.loadByPath(path7);
     if (!page) continue;
     const content = slot.store.loadContent(page.id)?.content ?? "";
     out.push({
@@ -6382,14 +6073,14 @@ function parsePrismerUri(uri) {
   const memoryIdx = rest.indexOf(segMemory);
   if (memoryIdx <= 0) return null;
   const workspaceId = rest.slice(0, memoryIdx);
-  const path9 = rest.slice(memoryIdx + segMemory.length);
-  if (!workspaceId || !path9) return null;
-  return { workspaceId, path: path9 };
+  const path7 = rest.slice(memoryIdx + segMemory.length);
+  if (!workspaceId || !path7) return null;
+  return { workspaceId, path: path7 };
 }
 
 // src/daemon/asset/metadata-index.ts
-import { existsSync as existsSync7, mkdirSync as mkdirSync7, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "fs";
-import { join as join10 } from "path";
+import { existsSync as existsSync7, mkdirSync as mkdirSync7, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
+import { join as join8 } from "path";
 var DEFAULT_LIMIT = 8;
 var PULL_PAGE_SIZE = 500;
 var THROTTLE_MS = 3e4;
@@ -6420,13 +6111,13 @@ var AssetMetadataIndex = class {
     if (!existsSync7(opts.workspaceStateDir)) {
       mkdirSync7(opts.workspaceStateDir, { recursive: true });
     }
-    this.cursorPath = join10(opts.workspaceStateDir, "asset-metadata-cursor.json");
+    this.cursorPath = join8(opts.workspaceStateDir, "asset-metadata-cursor.json");
   }
   /** Persisted cursor for this workspace, or 0 on first run / corrupted file. */
   readCursor() {
     if (!existsSync7(this.cursorPath)) return 0;
     try {
-      const parsed = JSON.parse(readFileSync6(this.cursorPath, "utf8"));
+      const parsed = JSON.parse(readFileSync5(this.cursorPath, "utf8"));
       if (parsed.workspaceId !== this.workspaceId) return 0;
       return parsed.cursor;
     } catch {
@@ -6479,13 +6170,9 @@ var AssetMetadataIndex = class {
     let applied = 0;
     const tx = this.db.transaction((items) => {
       for (const item of items) {
-        const assetId = item.assetId ?? item.id;
-        if (!assetId) {
-          throw new Error("Asset metadata index item missing assetId/id");
-        }
         upsert.run(
           this.workspaceId,
-          assetId,
+          item.assetId,
           item.contentHash,
           item.filename ?? null,
           item.folderPath ?? null,
@@ -6530,14 +6217,6 @@ var AssetMetadataIndex = class {
     const row = this.db.prepare("SELECT * FROM asset_metadata_index WHERE workspace_id = ? AND filename = ?").get(this.workspaceId, filename);
     return row ? rowToMetadata(row) : void 0;
   }
-  resolveByAssetId(assetId) {
-    const row = this.db.prepare("SELECT * FROM asset_metadata_index WHERE workspace_id = ? AND asset_id = ?").get(this.workspaceId, assetId);
-    return row ? rowToMetadata(row) : void 0;
-  }
-  resolveByContentHash(contentHash) {
-    const row = this.db.prepare("SELECT * FROM asset_metadata_index WHERE workspace_id = ? AND content_hash = ?").get(this.workspaceId, contentHash);
-    return row ? rowToMetadata(row) : void 0;
-  }
   /** Batch exact match — returns Map for O(1) access. */
   resolveByFilenames(filenames) {
     if (filenames.length === 0) return /* @__PURE__ */ new Map();
@@ -6556,10 +6235,7 @@ var AssetMetadataIndex = class {
 };
 
 // src/daemon/asset/rpc.ts
-import { closeSync, openSync, readSync, statSync as statSync2 } from "fs";
 var ASSET_PATH_PREFIX = "/local/asset/";
-var MAX_READ_BYTES = 256 * 1024;
-var MAX_SEARCH_BYTES = 1024 * 1024;
 function attachAssetRpc(opts) {
   return async (req, res) => {
     const url = req.url ?? "/";
@@ -6570,17 +6246,10 @@ function attachAssetRpc(opts) {
     try {
       if (method === "POST" && subpath === "search") {
         const body = await readJson3(req);
-        return await handleSearch2(opts, body, res);
+        return handleSearch2(opts.resolveIndex, body, res);
       }
-      if (method === "POST" && subpath === "describe") {
-        const body = await readJson3(req);
-        return handleDescribe(opts, body, res);
-      }
-      if (method === "POST" && subpath === "read") {
-        const body = await readJson3(req);
-        return await handleRead(opts, body, res);
-      }
-      return false;
+      respond3(res, 404, { error: "asset_route_not_found", path: url });
+      return true;
     } catch (err) {
       respond3(res, 500, {
         error: "asset_rpc_failed",
@@ -6590,21 +6259,18 @@ function attachAssetRpc(opts) {
     }
   };
 }
-async function handleSearch2(opts, body, res) {
+function handleSearch2(resolveIndex, body, res) {
   if (!body || typeof body !== "object") {
     return respond4002(res, "request body must be a JSON object");
   }
   const b = body;
-  if (typeof b.query !== "string" || !b.query.trim()) {
-    return respond4002(res, "query is required (non-empty string)");
-  }
-  if (typeof b.uri === "string" && b.uri.trim()) {
-    return searchAssetContent(opts, b.uri.trim(), b.query.trim(), res);
-  }
   if (typeof b.workspaceId !== "string" || !b.workspaceId) {
     return respond4002(res, "workspaceId is required (string)");
   }
-  const index = opts.resolveIndex(b.workspaceId);
+  if (typeof b.query !== "string" || !b.query.trim()) {
+    return respond4002(res, "query is required (non-empty string)");
+  }
+  const index = resolveIndex(b.workspaceId);
   if (!index) {
     respond3(res, 404, {
       error: "workspace_index_not_found",
@@ -6618,124 +6284,6 @@ async function handleSearch2(opts, body, res) {
   respond3(res, 200, { items });
   return true;
 }
-function handleDescribe(opts, body, res) {
-  const resolved = resolveAssetRef(opts, body);
-  if ("error" in resolved) return respond4002(res, resolved.error);
-  const cached = opts.assetCache?.get(resolved.row.contentHash);
-  respond3(res, 200, {
-    asset: resolved.row,
-    uri: `prismer://workspace/${resolved.workspaceId}/asset/${resolved.row.contentHash}`,
-    cache: cached ? { status: "hit", localPath: cached.localPath, sizeBytes: cached.sizeBytes, lastUsedAt: cached.lastUsedAt } : { status: "miss" },
-    tools: ["asset.describe", "asset.read", "asset.search"]
-  });
-  return true;
-}
-async function handleRead(opts, body, res) {
-  const resolved = resolveAssetRef(opts, body);
-  if ("error" in resolved) return respond4002(res, resolved.error);
-  if (!opts.assetCache) {
-    respond3(res, 503, { error: "asset_cache_unavailable" });
-    return true;
-  }
-  const b = body;
-  const offset = typeof b.offset === "number" && b.offset > 0 ? Math.floor(b.offset) : 0;
-  const requested = typeof b.length === "number" && b.length > 0 ? Math.floor(b.length) : MAX_READ_BYTES;
-  const length = Math.min(requested, MAX_READ_BYTES);
-  const cached = await opts.assetCache.getOrFetch(resolved.row.contentHash, {
-    workspaceIdHint: resolved.workspaceId,
-    assetId: resolved.row.assetId
-  });
-  const chunk = readFileRange(cached.localPath, offset, length);
-  const textLike = isTextLike(resolved.row);
-  respond3(res, 200, {
-    asset: resolved.row,
-    locator: { byteOffset: offset, byteLength: chunk.bytesRead },
-    truncated: requested > MAX_READ_BYTES || offset + chunk.bytesRead < chunk.sizeBytes,
-    encoding: textLike ? "utf8" : "base64",
-    content: textLike ? chunk.buffer.toString("utf8") : chunk.buffer.toString("base64")
-  });
-  return true;
-}
-async function searchAssetContent(opts, uri, query, res) {
-  const resolved = resolveAssetRef(opts, { uri });
-  if ("error" in resolved) return respond4002(res, resolved.error);
-  if (!opts.assetCache) {
-    respond3(res, 503, { error: "asset_cache_unavailable" });
-    return true;
-  }
-  if (!isTextLike(resolved.row)) {
-    respond3(res, 200, {
-      items: [],
-      unsupported: true,
-      reason: "content search currently supports text-like assets only",
-      asset: resolved.row
-    });
-    return true;
-  }
-  const cached = await opts.assetCache.getOrFetch(resolved.row.contentHash, {
-    workspaceIdHint: resolved.workspaceId,
-    assetId: resolved.row.assetId
-  });
-  const chunk = readFileRange(cached.localPath, 0, MAX_SEARCH_BYTES);
-  const text = chunk.buffer.toString("utf8");
-  const needle = query.toLowerCase();
-  const lines = text.split(/\r?\n/);
-  const items = [];
-  let byteOffset = 0;
-  for (let i = 0; i < lines.length && items.length < 20; i += 1) {
-    const line = lines[i] ?? "";
-    if (line.toLowerCase().includes(needle)) {
-      items.push({ line: i + 1, byteOffset, preview: line.slice(0, 500) });
-    }
-    byteOffset += Buffer.byteLength(line) + 1;
-  }
-  respond3(res, 200, {
-    items,
-    asset: resolved.row,
-    searched: { byteOffset: 0, byteLength: chunk.bytesRead, truncated: chunk.bytesRead < chunk.sizeBytes }
-  });
-  return true;
-}
-function resolveAssetRef(opts, body) {
-  if (!body || typeof body !== "object") return { error: "request body must be a JSON object" };
-  const b = body;
-  let workspaceId = typeof b.workspaceId === "string" ? b.workspaceId : "";
-  let assetId = typeof b.assetId === "string" ? b.assetId : "";
-  let contentHash = typeof b.contentHash === "string" ? b.contentHash : "";
-  if (typeof b.uri === "string" && b.uri.trim()) {
-    const [uri] = parseUris(b.uri.trim());
-    if (!uri) return { error: "uri must be prismer://workspace/<workspaceId>/asset/<hash>" };
-    if (uri.type !== "asset") return { error: "file uri lookup is not available in this RPC yet; pass asset uri or assetId" };
-    workspaceId = uri.workspaceId ?? workspaceId;
-    contentHash = uri.rest;
-  }
-  if (!workspaceId) return { error: "workspaceId is required (string)" };
-  const index = opts.resolveIndex(workspaceId);
-  if (!index) return { error: "workspace asset index is not synced yet" };
-  const row = assetId ? index.resolveByAssetId(assetId) : contentHash ? index.resolveByContentHash(contentHash) : void 0;
-  if (!row) return { error: "asset not found in local metadata index" };
-  return { workspaceId, row };
-}
-function isTextLike(row) {
-  const mime = row.mime ?? "";
-  const name = row.filename ?? "";
-  return mime.startsWith("text/") || mime.includes("json") || mime.includes("xml") || mime.includes("markdown") || mime.includes("csv") || /\.(md|markdown|txt|json|csv|tsv|ndjson|js|jsx|ts|tsx|py|go|rs|java|kt|swift|rb|php|css|html|htm|xhtml|sql|yaml|yml|toml|log)$/i.test(
-    name
-  );
-}
-function readFileRange(path9, offset, length) {
-  const sizeBytes = statSync2(path9).size;
-  if (offset >= sizeBytes) return { buffer: Buffer.alloc(0), bytesRead: 0, sizeBytes };
-  const fd = openSync(path9, "r");
-  try {
-    const target = Math.min(length, sizeBytes - offset);
-    const buffer = Buffer.alloc(target);
-    const bytesRead = readSync(fd, buffer, 0, target, offset);
-    return { buffer: buffer.subarray(0, bytesRead), bytesRead, sizeBytes };
-  } finally {
-    closeSync(fd);
-  }
-}
 function respond3(res, status, body) {
   res.statusCode = status;
   res.setHeader("Content-Type", "application/json");
@@ -6757,532 +6305,9 @@ async function readJson3(req) {
   }
 }
 
-// src/daemon/asset/origin/drop-folder.ts
+// src/daemon/outbox-watcher.ts
 import { promises as fs3 } from "fs";
-import { homedir as homedir5 } from "os";
 import * as path5 from "path";
-var DropFolderAdapter = class {
-  kind = "drop-folder";
-  workspaceDir;
-  rootDir;
-  constructor(opts = {}) {
-    this.workspaceDir = opts.workspaceDir;
-    this.rootDir = opts.rootDir ?? path5.join(opts.homeDir ?? homedir5(), ".prismer");
-  }
-  /**
-   * Long-lived async iterable wrapping `scanOnce` on a 1s polling interval.
-   * Stops when the iterator is broken (e.g. consumer returns / throws).
-   */
-  async *observe(workspaceId) {
-    while (true) {
-      const batch = await this.scanOnce(workspaceId);
-      for (const obs of batch) yield obs;
-      await sleep(1e3);
-    }
-  }
-  /**
-   * Single-tick scan exposed for tests and one-shot CLI usage. Reads every
-   * file currently under the workspace's drop directory, returning one
-   * observation per file. The caller is expected to feed each into the
-   * outbox; idempotency on the outbox side collapses re-observations of
-   * unchanged files.
-   */
-  async scanOnce(workspaceId) {
-    const drop = this.dropDir(workspaceId);
-    let entries = [];
-    try {
-      entries = await fs3.readdir(drop);
-    } catch (err) {
-      if (err.code === "ENOENT") return [];
-      throw err;
-    }
-    const out = [];
-    for (const name of entries) {
-      if (name.startsWith(".")) continue;
-      const fullPath = path5.join(drop, name);
-      const stat = await fs3.lstat(fullPath).catch(() => null);
-      if (!stat) continue;
-      if (stat.isSymbolicLink()) continue;
-      if (stat.isDirectory()) {
-        for (const nested of await walk(fullPath)) {
-          const nstat = await fs3.lstat(nested).catch(() => null);
-          if (!nstat || !nstat.isFile()) continue;
-          out.push(makeObservation(workspaceId, nested, drop, nstat.size, Math.floor(nstat.mtimeMs)));
-        }
-        continue;
-      }
-      if (!stat.isFile()) continue;
-      out.push(makeObservation(workspaceId, fullPath, drop, stat.size, Math.floor(stat.mtimeMs)));
-    }
-    return out;
-  }
-  async identifySource(obs) {
-    const detail = obs.detail;
-    const rel = path5.relative(detail.watchDir, detail.path);
-    const folderDir = path5.dirname(rel);
-    return {
-      sourceRef: `folder://${obs.workspaceId}/${rel.split(path5.sep).join("/")}`,
-      hints: {
-        filename: path5.basename(detail.path),
-        folderPath: folderDir === "." ? "" : folderDir.split(path5.sep).join("/")
-      }
-    };
-  }
-  async fetch(obs) {
-    const detail = obs.detail;
-    const bytes = await fs3.readFile(detail.path);
-    return {
-      bytes,
-      mime: mimeFromExtension(detail.path),
-      size: bytes.length
-    };
-  }
-  /** Hook called by UploadRunner after a successful upload of one observation. */
-  async onUploadSuccess(obs) {
-    await this.moveTo(obs, this.uploadedDir(obs.workspaceId));
-  }
-  /** Hook called by UploadRunner after attempts hit maxAttempts. */
-  async onUploadFailure(obs) {
-    await this.moveTo(obs, this.failedDir(obs.workspaceId));
-  }
-  async moveTo(obs, destDir) {
-    const detail = obs.detail;
-    if (!detail || typeof detail.path !== "string") return;
-    try {
-      const rel = typeof detail.watchDir === "string" ? path5.relative(detail.watchDir, detail.path) : path5.basename(detail.path);
-      const safeRel = rel && !rel.startsWith("..") && !path5.isAbsolute(rel) ? rel : path5.basename(detail.path);
-      const destPath = path5.join(destDir, safeRel);
-      await fs3.mkdir(path5.dirname(destPath), { recursive: true });
-      await fs3.rename(detail.path, destPath);
-    } catch (err) {
-      if (err.code === "ENOENT") return;
-      throw err;
-    }
-  }
-  dropDir(workspaceId) {
-    if (this.workspaceDir) return path5.join(this.workspaceDir, "drop");
-    return path5.join(this.rootDir, "workspaces", workspaceId, "drop");
-  }
-  uploadedDir(workspaceId) {
-    if (this.workspaceDir) return path5.join(this.workspaceDir, "uploaded");
-    return path5.join(this.rootDir, "workspaces", workspaceId, "uploaded");
-  }
-  failedDir(workspaceId) {
-    if (this.workspaceDir) return path5.join(this.workspaceDir, "upload-failed");
-    return path5.join(this.rootDir, "workspaces", workspaceId, "upload-failed");
-  }
-};
-function makeObservation(workspaceId, filePath, watchDir, size, mtime) {
-  return {
-    workspaceId,
-    detail: { path: filePath, watchDir, size, mtime },
-    observedAt: mtime
-  };
-}
-async function walk(root) {
-  const out = [];
-  const entries = await fs3.readdir(root).catch(() => []);
-  for (const name of entries) {
-    if (name.startsWith(".")) continue;
-    const full = path5.join(root, name);
-    const stat = await fs3.lstat(full).catch(() => null);
-    if (!stat) continue;
-    if (stat.isSymbolicLink()) continue;
-    if (stat.isDirectory()) {
-      out.push(...await walk(full));
-    } else if (stat.isFile()) {
-      out.push(full);
-    }
-  }
-  return out;
-}
-var MIME_BY_EXT = {
-  ".txt": "text/plain",
-  ".md": "text/markdown",
-  ".csv": "text/csv",
-  ".json": "application/json",
-  ".yaml": "application/yaml",
-  ".yml": "application/yaml",
-  ".pdf": "application/pdf",
-  ".png": "image/png",
-  ".jpg": "image/jpeg",
-  ".jpeg": "image/jpeg",
-  ".gif": "image/gif",
-  ".webp": "image/webp",
-  ".svg": "image/svg+xml",
-  ".html": "text/html",
-  ".htm": "text/html",
-  ".xhtml": "application/xhtml+xml",
-  ".xml": "application/xml",
-  ".zip": "application/zip",
-  ".tar": "application/x-tar",
-  ".gz": "application/gzip",
-  ".mp3": "audio/mpeg",
-  ".mp4": "video/mp4",
-  ".mov": "video/quicktime",
-  ".wav": "audio/wav"
-};
-function mimeFromExtension(p) {
-  const ext = path5.extname(p).toLowerCase();
-  return MIME_BY_EXT[ext] ?? null;
-}
-function sleep(ms) {
-  return new Promise((r) => setTimeout(r, ms));
-}
-
-// src/daemon/asset/origin/outbox.ts
-import Database4 from "better-sqlite3";
-import { createHash as createHash5, randomUUID as randomUUID5 } from "crypto";
-import { z as z7 } from "zod";
-var OriginObservationRecordSchema = z7.object({
-  workspaceId: z7.string().min(1),
-  originKind: z7.enum(["upload", "drop-folder", "agent-gen"]),
-  sourceRef: z7.string().min(1),
-  payloadJson: z7.string().min(2),
-  hintsJson: z7.string().min(2),
-  observedAt: z7.number().int().nonnegative()
-});
-var DDL_STATEMENTS = [
-  `CREATE TABLE IF NOT EXISTS asset_origin_outbox (
-    id TEXT PRIMARY KEY,
-    workspaceId TEXT NOT NULL,
-    originKind TEXT NOT NULL,
-    sourceRef TEXT NOT NULL,
-    payloadJson TEXT NOT NULL,
-    hintsJson TEXT NOT NULL,
-    observedAt INTEGER NOT NULL,
-    idempotencyKey TEXT NOT NULL UNIQUE,
-    status TEXT NOT NULL CHECK (status IN ('pending', 'claimed', 'uploaded')),
-    attempts INTEGER NOT NULL DEFAULT 0,
-    lastError TEXT,
-    assetId TEXT,
-    contentHash TEXT,
-    createdAt INTEGER NOT NULL,
-    updatedAt INTEGER NOT NULL
-  )`,
-  `CREATE INDEX IF NOT EXISTS idx_asset_origin_outbox_status
-    ON asset_origin_outbox(status, createdAt)`,
-  `CREATE TABLE IF NOT EXISTS asset_origin_outbox_dead_letter (
-    id TEXT PRIMARY KEY,
-    workspaceId TEXT NOT NULL,
-    originKind TEXT NOT NULL,
-    sourceRef TEXT NOT NULL,
-    payloadJson TEXT NOT NULL,
-    hintsJson TEXT NOT NULL,
-    observedAt INTEGER NOT NULL,
-    errorJson TEXT NOT NULL,
-    attempts INTEGER NOT NULL,
-    createdAt INTEGER NOT NULL
-  )`
-];
-var OriginOutbox = class {
-  db;
-  constructor(opts) {
-    this.db = new Database4(opts.dbPath);
-    this.db.pragma("journal_mode = WAL");
-    for (const ddl of DDL_STATEMENTS) this.db.prepare(ddl).run();
-  }
-  /**
-   * Validate + persist an observation. Schema-invalid input lands in
-   * `asset_origin_outbox_dead_letter` (never silently dropped). Re-enqueue
-   * with the same {originKind, workspaceId, sourceRef, observedAt} returns
-   * the existing row id without inserting again.
-   */
-  enqueue(record) {
-    const now = Date.now();
-    const parsed = OriginObservationRecordSchema.safeParse(record);
-    if (!parsed.success) {
-      const dlId = `dl_${randomUUID5()}`;
-      const raw = record && typeof record === "object" ? record : {};
-      this.db.prepare(
-        `INSERT INTO asset_origin_outbox_dead_letter
-           (id, workspaceId, originKind, sourceRef, payloadJson, hintsJson, observedAt, errorJson, attempts, createdAt)
-           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
-      ).run(
-        dlId,
-        coerceToString(raw.workspaceId, ""),
-        coerceToString(raw.originKind, ""),
-        coerceToString(raw.sourceRef, ""),
-        coerceToJson(raw.payloadJson),
-        coerceToJson(raw.hintsJson),
-        typeof raw.observedAt === "number" ? raw.observedAt : 0,
-        JSON.stringify(parsed.error.errors),
-        0,
-        now
-      );
-      return { id: dlId, deadLetter: true };
-    }
-    const validated = parsed.data;
-    const idempotencyKey = computeIdempotencyKey(validated);
-    const rowId = `out_${randomUUID5()}`;
-    try {
-      this.db.prepare(
-        `INSERT INTO asset_origin_outbox
-           (id, workspaceId, originKind, sourceRef, payloadJson, hintsJson, observedAt,
-            idempotencyKey, status, attempts, createdAt, updatedAt)
-           VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'pending', 0, ?, ?)`
-      ).run(
-        rowId,
-        validated.workspaceId,
-        validated.originKind,
-        validated.sourceRef,
-        validated.payloadJson,
-        validated.hintsJson,
-        validated.observedAt,
-        idempotencyKey,
-        now,
-        now
-      );
-      return { id: rowId, deadLetter: false };
-    } catch (err) {
-      const code = err.code;
-      if (code === "SQLITE_CONSTRAINT_UNIQUE") {
-        const existing = this.db.prepare("SELECT id FROM asset_origin_outbox WHERE idempotencyKey = ?").get(idempotencyKey);
-        if (existing) return { id: existing.id, deadLetter: false };
-      }
-      throw err;
-    }
-  }
-  /**
-   * Atomically claim the oldest pending row, transition status to 'claimed',
-   * and return it. Returns null when the queue is empty. The caller MUST
-   * follow up with `markUploaded` (success) or `recordFailure` (error) so
-   * the row doesn't sit in 'claimed' forever — Phase-0 is a single worker
-   * so we don't need a claim-expiry sweeper yet.
-   */
-  claimNext() {
-    const pickAndClaim = this.db.transaction(() => {
-      const row = this.db.prepare(
-        `SELECT id, workspaceId, originKind, sourceRef, payloadJson, hintsJson,
-                  observedAt, attempts, lastError, createdAt
-             FROM asset_origin_outbox
-            WHERE status = 'pending'
-            ORDER BY createdAt ASC
-            LIMIT 1`
-      ).get();
-      if (!row) return null;
-      this.db.prepare("UPDATE asset_origin_outbox SET status = 'claimed', updatedAt = ? WHERE id = ?").run(Date.now(), row.id);
-      return row;
-    });
-    const claimed = pickAndClaim();
-    if (!claimed) return null;
-    return {
-      id: claimed.id,
-      row: rawToRow(claimed)
-    };
-  }
-  markUploaded(id, meta) {
-    this.db.prepare(
-      `UPDATE asset_origin_outbox
-            SET status = 'uploaded', assetId = ?, contentHash = ?, updatedAt = ?
-          WHERE id = ?`
-    ).run(meta.assetId, meta.contentHash, Date.now(), id);
-  }
-  /**
-   * Record one failed upload attempt. Increments `attempts`, stores the
-   * latest error, and either re-queues for retry (status -> 'pending') or
-   * spills to dead-letter once attempts hit maxAttempts.
-   */
-  recordFailure(id, error, opts) {
-    const now = Date.now();
-    const updated = this.db.transaction(() => {
-      const row = this.db.prepare(
-        `SELECT id, workspaceId, originKind, sourceRef, payloadJson, hintsJson,
-                  observedAt, attempts, createdAt
-             FROM asset_origin_outbox
-            WHERE id = ?`
-      ).get(id);
-      if (!row) return;
-      const nextAttempts = row.attempts + 1;
-      if (nextAttempts >= opts.maxAttempts) {
-        this.db.prepare(
-          `INSERT INTO asset_origin_outbox_dead_letter
-             (id, workspaceId, originKind, sourceRef, payloadJson, hintsJson, observedAt, errorJson, attempts, createdAt)
-             VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
-        ).run(
-          `dl_${randomUUID5()}`,
-          row.workspaceId,
-          row.originKind,
-          row.sourceRef,
-          row.payloadJson,
-          row.hintsJson,
-          row.observedAt,
-          JSON.stringify({ message: error, attempts: nextAttempts }),
-          nextAttempts,
-          now
-        );
-        this.db.prepare("DELETE FROM asset_origin_outbox WHERE id = ?").run(id);
-      } else {
-        this.db.prepare(
-          `UPDATE asset_origin_outbox
-                SET status = 'pending', attempts = ?, lastError = ?, updatedAt = ?
-              WHERE id = ?`
-        ).run(nextAttempts, error, now, id);
-      }
-    });
-    updated();
-  }
-  /**
-   * Re-promote any rows orphaned in `'claimed'` state back to `'pending'`.
-   *
-   * Why this exists: claimNext() transitions a row to 'claimed' under a
-   * transaction, but the upload that follows runs OUTSIDE the transaction
-   * (network call). If the daemon dies between the claim and the
-   * markUploaded/recordFailure call, the row is stuck — claimNext() only
-   * selects status='pending', so it would never be picked up again.
-   *
-   * Phase-0 single-worker safety: there is at most one in-flight claim at
-   * any time, so on next process startup ANY 'claimed' row is by definition
-   * orphaned. We promote it back to 'pending' (preserving attempts /
-   * lastError) so the next drainOnce can retry it.
-   *
-   * If we ever go multi-worker, this naive sweep becomes unsafe and must be
-   * replaced with a lease/heartbeat scheme.
-   *
-   * Returns the number of rows recovered (for logging / observability).
-   */
-  resetClaimed() {
-    const result = this.db.prepare(
-      "UPDATE asset_origin_outbox SET status = 'pending', updatedAt = ? WHERE status = 'claimed'"
-    ).run(Date.now());
-    return Number(result.changes);
-  }
-  pendingCount() {
-    return this.db.prepare("SELECT COUNT(*) AS n FROM asset_origin_outbox WHERE status = 'pending'").get().n;
-  }
-  uploadedCount() {
-    return this.db.prepare("SELECT COUNT(*) AS n FROM asset_origin_outbox WHERE status = 'uploaded'").get().n;
-  }
-  deadLetterCount() {
-    return this.db.prepare("SELECT COUNT(*) AS n FROM asset_origin_outbox_dead_letter").get().n;
-  }
-  close() {
-    this.db.close();
-  }
-};
-function computeIdempotencyKey(record) {
-  return createHash5("sha256").update(record.originKind).update("|").update(record.workspaceId).update("|").update(record.sourceRef).update("|").update(String(record.observedAt)).digest("hex");
-}
-function coerceToString(value, fallback) {
-  if (typeof value === "string") return value;
-  if (value == null) return fallback;
-  return String(value);
-}
-function coerceToJson(value) {
-  if (typeof value === "string") return value;
-  if (value == null) return "{}";
-  try {
-    return JSON.stringify(value);
-  } catch {
-    return "{}";
-  }
-}
-function rawToRow(raw) {
-  return {
-    id: raw.id,
-    workspaceId: raw.workspaceId,
-    originKind: raw.originKind,
-    sourceRef: raw.sourceRef,
-    payloadJson: raw.payloadJson,
-    hintsJson: raw.hintsJson,
-    observedAt: raw.observedAt,
-    attempts: raw.attempts,
-    lastError: raw.lastError,
-    createdAt: raw.createdAt
-  };
-}
-
-// src/daemon/asset/origin/upload-runner.ts
-var UploadRunner = class {
-  constructor(opts) {
-    this.opts = opts;
-    opts.outbox.resetClaimed();
-  }
-  opts;
-  /**
-   * Process every currently-pending outbox row exactly once. Failed rows
-   * stay 'pending' (with attempts+1) for the next drainOnce call; rows
-   * that hit maxAttempts spill to dead-letter and trigger onUploadFailure.
-   *
-   * Returns the count of rows processed (success + failure).
-   */
-  async drainOnce() {
-    let count = 0;
-    while (true) {
-      const claim = this.opts.outbox.claimNext();
-      if (!claim) break;
-      count += 1;
-      const row = claim.row;
-      const adapter = this.opts.adapters[row.originKind];
-      if (!adapter) {
-        this.opts.outbox.recordFailure(claim.id, `no adapter registered for kind=${row.originKind}`, {
-          maxAttempts: 1
-          // unrecoverable — fast-fail to dead-letter
-        });
-        continue;
-      }
-      try {
-        const obs = rowToObservation(row);
-        const bytes = await adapter.fetch(obs);
-        const id = await adapter.identifySource(obs);
-        const filename = id.hints?.filename ?? path6.basename(row.sourceRef);
-        const metadata = {
-          sourceRef: row.sourceRef,
-          sourceKind: row.originKind
-        };
-        if (id.hints?.description) metadata.description = id.hints.description;
-        if (id.hints?.sourceAgentImUserId) {
-          metadata.sourceAgentImUserId = id.hints.sourceAgentImUserId;
-        }
-        const folderPath = id.hints?.folderPath || void 0;
-        const result = await this.opts.cloud.uploadAsset({
-          workspaceId: row.workspaceId,
-          filename,
-          bytes: bytes.bytes,
-          mime: bytes.mime,
-          size: bytes.size,
-          metadata,
-          folderPath
-        });
-        this.opts.outbox.markUploaded(claim.id, result);
-        await adapter.onUploadSuccess?.(obs);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        const before = this.opts.outbox.deadLetterCount();
-        this.opts.outbox.recordFailure(claim.id, message, { maxAttempts: this.opts.maxAttempts });
-        const after = this.opts.outbox.deadLetterCount();
-        if (after > before) {
-          const obs = rowToObservation(row);
-          await adapter.onUploadFailure?.(obs, err);
-        }
-      }
-    }
-    return count;
-  }
-};
-function rowToObservation(row) {
-  let detail = {};
-  try {
-    const parsed = JSON.parse(row.payloadJson);
-    if (parsed && typeof parsed === "object") detail = parsed;
-  } catch {
-  }
-  return {
-    workspaceId: row.workspaceId,
-    detail,
-    observedAt: row.observedAt
-  };
-}
-var path6 = {
-  basename(p) {
-    const idx = Math.max(p.lastIndexOf("/"), p.lastIndexOf("\\"));
-    return idx === -1 ? p : p.slice(idx + 1);
-  }
-};
-
-// src/daemon/outbox-watcher.ts
-import { promises as fs4 } from "fs";
-import * as path7 from "path";
 var DEFAULT_INTERVAL_MS = 2e3;
 var RESERVED_SUBDIR = "_uploaded";
 var OutboxWatcher = class {
@@ -7449,7 +6474,7 @@ var OutboxWatcher = class {
   async scanDir(dir, kind, task) {
     let entries = [];
     try {
-      entries = await fs4.readdir(dir);
+      entries = await fs3.readdir(dir);
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") return;
@@ -7459,10 +6484,10 @@ var OutboxWatcher = class {
     for (const name of entries) {
       if (name.startsWith(".")) continue;
       if (name === RESERVED_SUBDIR) continue;
-      const full = path7.join(dir, name);
+      const full = path5.join(dir, name);
       let st;
       try {
-        st = await fs4.stat(full);
+        st = await fs3.stat(full);
       } catch {
         continue;
       }
@@ -7487,8 +6512,8 @@ var OutboxWatcher = class {
       this.log("warn", `skip ${filePath}: no active taskId (no dispatch/handoff received yet)`);
       return;
     }
-    const bytes = await fs4.readFile(filePath);
-    const fileName = path7.basename(filePath);
+    const bytes = await fs3.readFile(filePath);
+    const fileName = path5.basename(filePath);
     const blob = new Blob([new Uint8Array(bytes)]);
     const form = new FormData();
     form.append("workspaceId", wsId);
@@ -7727,15 +6752,6 @@ var Runner = class extends EventEmitter3 {
   outboxWatcher;
   memoryWiring;
   assetMetadataIndexes = /* @__PURE__ */ new Map();
-  workspaceMirrors = /* @__PURE__ */ new Map();
-  assetOriginOutbox;
-  dropFolderAdapter;
-  dropFolderUploadRunner;
-  dropFolderTimer;
-  dropFolderWorkspaceId = "";
-  dropFolderWorkspaceDir = "";
-  dropFolderTickInFlight = false;
-  dropFolderStable = /* @__PURE__ */ new Map();
   state = "idle";
   startedAt = 0;
   workspaceId = "";
@@ -7777,7 +6793,6 @@ var Runner = class extends EventEmitter3 {
     this.servicePool = new ServicePool();
     this.installStaticHostedAgentFromEnv();
     this.loadAgentsFromDb();
-    await this.prepareLocalProfiles();
     this.syncQueue = new SyncQueue(this.db);
     this.syncWorker = new SyncWorker({ queue: this.syncQueue, flush: (row) => this.flushSyncRow(row) });
     this.syncWorker.start();
@@ -7799,10 +6814,9 @@ var Runner = class extends EventEmitter3 {
       );
     }
     if (this.workspaceId) {
-      this.syncAssetState(this.workspaceId).catch(
-        (err) => console.error("[Daemon] Initial asset sync failed:", err.message)
+      this.syncAssetMetadata(this.workspaceId).catch(
+        (err) => console.error("[Daemon] Initial asset metadata sync failed:", err.message)
       );
-      await this.ensureDropFolderRuntime(this.workspaceId);
     }
     const containerId = process.env.PRISMER_CONTAINER_ID;
     const isContainer = !!containerId || process.env.PRISMER_RUNTIME_MODE === "container";
@@ -7853,8 +6867,7 @@ var Runner = class extends EventEmitter3 {
         // an actual agent process.
         attachMemory: this.memoryWiring ? attachMemoryRpc({ runtime: this.memoryWiring.runtime }) : void 0,
         attachAsset: attachAssetRpc({
-          resolveIndex: (workspaceId) => this.assetMetadataIndexes.get(workspaceId),
-          assetCache: this.assetCache
+          resolveIndex: (workspaceId) => this.assetMetadataIndexes.get(workspaceId)
         })
       });
       await this.localServer.start();
@@ -7903,7 +6916,6 @@ var Runner = class extends EventEmitter3 {
     this.memoryWiring = void 0;
     this.ws?.close();
     this.outboxWatcher?.stop();
-    this.stopDropFolderRuntime();
     await this.servicePool?.shutdown();
     await this.localServer?.stop();
     try {
@@ -7960,7 +6972,6 @@ var Runner = class extends EventEmitter3 {
       runningTaskIds: Array.from(this.runningTasks.keys()),
       observability: {
         adapters: this.snapshotAdapterObservability(),
-        assetSync: this.snapshotAssetSyncObservability(),
         ...this.lastTaskError ? { lastTaskError: this.lastTaskError } : {}
       }
     };
@@ -7996,35 +7007,6 @@ var Runner = class extends EventEmitter3 {
       });
     }
   }
-  async prepareLocalProfiles() {
-    const rows = this.db.prepare(
-      `SELECT id, workspace_id, agent_im_user_id, adapter_name, name, config, version, synced_at
-         FROM agent_profiles
-         WHERE deleted_at IS NULL`
-    ).all();
-    for (const row of rows) {
-      const adapter = this.registry.get(row.adapter_name);
-      if (!adapter?.prepareProfile) continue;
-      try {
-        await adapter.prepareProfile({
-          id: row.id,
-          workspaceId: row.workspace_id,
-          agentImUserId: row.agent_im_user_id,
-          adapterName: row.adapter_name,
-          name: row.name,
-          config: parseProfileConfig(row.config),
-          version: row.version,
-          createdAt: new Date(row.synced_at ?? Date.now()),
-          updatedAt: new Date(row.synced_at ?? Date.now())
-        });
-      } catch (err) {
-        process.stderr.write(
-          `[daemon] local profile preflight skipped agent=${row.agent_im_user_id} profile=${row.id}: ${err.message}
-`
-        );
-      }
-    }
-  }
   /**
    * Register an in-process AgentProfile snapshot (called by agent CLI / sync layer).
    * Used to populate the `agents` list in agent.host.declare.
@@ -8085,7 +7067,7 @@ var Runner = class extends EventEmitter3 {
       if (!existsSync9(rawFile)) {
         throw new Error(`PRISMER_HOSTED_AGENT_FILE not found: ${rawFile}`);
       }
-      raw = readFileSync7(rawFile, "utf8");
+      raw = readFileSync6(rawFile, "utf8");
     } else if (rawJson) {
       raw = rawJson;
     }
@@ -8187,7 +7169,7 @@ var Runner = class extends EventEmitter3 {
         name: a.name,
         adapterName: a.adapterName,
         capabilities: a.capabilities,
-        profiles: Array.from(a.profiles.entries()).map(([id, version]) => ({ id, version }))
+        profiles: Array.from(a.profiles.entries()).map(([id, version2]) => ({ id, version: version2 }))
       }))
     };
     this.ws.send(envelope("agent.host.declare", payload, this.config.daemon_id));
@@ -8229,29 +7211,17 @@ var Runner = class extends EventEmitter3 {
         (err) => console.error("[Daemon] Initial memory sync failed:", err.message)
       );
     }
-    this.syncAssetState(this.workspaceId).catch(
-      (err) => console.error("[Daemon] Asset sync failed:", err.message)
+    this.syncAssetMetadata(this.workspaceId).catch(
+      (err) => console.error("[Daemon] Asset metadata sync failed:", err.message)
     );
-    await this.ensureDropFolderRuntime(this.workspaceId);
     for (const id of payload.profilesToSync) {
       try {
-        await this.servicePool.drop(id);
         await this.syncProfileFromCloud(id);
       } catch (err) {
         this.emit("sync-error", err);
       }
     }
-    for (const id of payload.profilesToDelete ?? []) {
-      const row = this.db.prepare("SELECT agent_im_user_id FROM agent_profiles WHERE id = ?").get(id);
-      this.db.prepare("DELETE FROM agent_profiles WHERE id = ?").run(id);
-      if (row) {
-        this.db.prepare("DELETE FROM agents WHERE im_user_id = ?").run(row.agent_im_user_id);
-      }
-      process.stderr.write(`[daemon] tombstone profile=${id}
-`);
-    }
-    if (payload.profilesToDelete?.length) this.loadAgentsFromDb();
-    if ((payload.profilesToSync.length > 0 || (payload.profilesToDelete?.length ?? 0) > 0) && this.wsConnected) this.sendDeclare();
+    if (payload.profilesToSync.length > 0 && this.wsConnected) this.sendDeclare();
     this.emit("host-acked", payload);
   }
   async onTaskDispatch(payload, requestId) {
@@ -8291,15 +7261,9 @@ var Runner = class extends EventEmitter3 {
             this.ws.send(envelope("task.dispatch.progress", progressPayload));
           }
         });
-        this.ws.send(envelope("task.dispatch.reply", reply, requestId));
-        if (!reply.ok) {
-          const code = reply.error?.code ?? "unknown";
-          const message = reply.error?.message ?? "unknown error";
-          process.stderr.write(`[daemon] dispatch failed task=${payload.taskId} code=${code} message=${message}
-`);
-        }
+        this.ws.send(envelope("task.dispatch.reply", reply, requestId));
       } else {
-        const reply = await handleDispatch(payload, requestId, {
+        await handleDispatch(payload, requestId, {
           registry: this.registry,
           cloud: this.cloud,
           uriResolver: this.uriResolver,
@@ -8315,12 +7279,6 @@ var Runner = class extends EventEmitter3 {
             if (running) running.lastProgressAt = Date.now();
           }
         });
-        if (!reply.ok) {
-          const code = reply.error?.code ?? "unknown";
-          const message = reply.error?.message ?? "unknown error";
-          process.stderr.write(`[daemon] dispatch failed task=${payload.taskId} code=${code} message=${message}
-`);
-        }
       }
       process.stdout.write(`[daemon] dispatch done task=${payload.taskId}
 `);
@@ -8348,7 +7306,6 @@ var Runner = class extends EventEmitter3 {
   }
   async onAgentProfileChanged(payload) {
     try {
-      await this.servicePool.drop(payload.profileId);
       await this.syncProfileFromCloud(payload.profileId);
       if (this.wsConnected) this.sendDeclare();
     } catch (err) {
@@ -8356,21 +7313,7 @@ var Runner = class extends EventEmitter3 {
     }
   }
   async syncProfileFromCloud(profileId) {
-    let profile;
-    try {
-      profile = await this.cloud.get(`/api/im/agent_profiles/${encodeURIComponent(profileId)}`);
-    } catch (err) {
-      if (err instanceof CloudError && err.status === 404) {
-        const row = this.db.prepare("SELECT agent_im_user_id FROM agent_profiles WHERE id = ?").get(profileId);
-        this.db.prepare("DELETE FROM agent_profiles WHERE id = ?").run(profileId);
-        if (row) {
-          this.db.prepare("DELETE FROM agents WHERE im_user_id = ?").run(row.agent_im_user_id);
-        }
-        this.loadAgentsFromDb();
-        return;
-      }
-      throw err;
-    }
+    const profile = await this.cloud.get(`/api/im/agent_profiles/${encodeURIComponent(profileId)}`);
     const agent = await this.resolveOwnedAgent(profile.agentImUserId);
     const adapter = this.registry.get(profile.adapterName);
     const capabilities = agent?.card?.capabilities?.length ? agent.card.capabilities : adapter?.capabilities ?? [];
@@ -8405,14 +7348,6 @@ var Runner = class extends EventEmitter3 {
       );
     });
     tx();
-    try {
-      await adapter?.prepareProfile?.(profile);
-    } catch (err) {
-      process.stderr.write(
-        `[daemon] profile preflight skipped agent=${profile.agentImUserId} profile=${profile.id}: ${err.message}
-`
-      );
-    }
     this.loadAgentsFromDb();
     process.stdout.write(
       `[daemon] profile synced agent=${profile.agentImUserId} profile=${profile.id} adapter=${profile.adapterName}
@@ -8441,10 +7376,15 @@ var Runner = class extends EventEmitter3 {
   }
   async onAssetChanged(payload) {
     if (!payload.workspaceId) return;
+    const index = this.assetMetadataIndexes.get(payload.workspaceId);
+    if (!index) return;
     try {
-      await this.syncAssetState(payload.workspaceId);
+      const result = await index.pullDelta();
+      if (result.applied > 0) {
+        console.log(`[Daemon] asset.changed workspace=${payload.workspaceId} applied=${result.applied}`);
+      }
     } catch (err) {
-      console.error(`[Daemon] asset.changed sync failed workspace=${payload.workspaceId}:`, err.message);
+      console.error(`[Daemon] asset.changed pullDelta failed workspace=${payload.workspaceId}:`, err.message);
     }
   }
   onWorkspaceFileChanged(payload) {
@@ -8482,15 +7422,6 @@ var Runner = class extends EventEmitter3 {
       }
     };
   }
-  snapshotAssetSyncObservability() {
-    return {
-      workspaceId: this.dropFolderWorkspaceId || null,
-      rootDir: this.dropFolderWorkspaceDir || null,
-      dropDir: this.dropFolderWorkspaceDir ? join13(this.dropFolderWorkspaceDir, "drop") : null,
-      uploadedDir: this.dropFolderWorkspaceDir ? join13(this.dropFolderWorkspaceDir, "uploaded") : null,
-      failedDir: this.dropFolderWorkspaceDir ? join13(this.dropFolderWorkspaceDir, "upload-failed") : null
-    };
-  }
   /**
    * Ensure an AssetMetadataIndex exists for the given workspace and pull
    * delta from cloud. Idempotent — creates the index on first call, reuses
@@ -8513,132 +7444,6 @@ var Runner = class extends EventEmitter3 {
       console.log(`[AssetMeta] workspace=${workspaceId}: ${result.applied} applied, cursor=${result.cursor}`);
     }
   }
-  /**
-   * Ensure a WorkspaceMirror exists for the workspace and pull path→asset
-   * bindings from cloud. Cold-start daemons previously only had this table
-   * populated by WS push or per-path URI fallback, so local asset state looked
-   * empty even though cloud files existed.
-   */
-  async syncWorkspaceFiles(workspaceId) {
-    let mirror = this.workspaceMirrors.get(workspaceId);
-    if (!mirror) {
-      const stateDir = `${this.paths.root}/${workspaceId}`;
-      mirror = new WorkspaceMirror({
-        db: this.db,
-        cloud: this.cloud,
-        workspaceId,
-        workspaceStateDir: stateDir
-      });
-      this.workspaceMirrors.set(workspaceId, mirror);
-    }
-    const result = await mirror.pullDelta();
-    if (result.applied > 0) {
-      console.log(`[WorkspaceFiles] workspace=${workspaceId}: ${result.applied} applied, cursor=${result.cursor ?? "null"}`);
-    }
-  }
-  async syncAssetState(workspaceId) {
-    if (!this.paths?.root) return;
-    await Promise.all([
-      this.syncAssetMetadata(workspaceId),
-      this.syncWorkspaceFiles(workspaceId)
-    ]);
-  }
-  /**
-   * Desktop asset ingress: watch a user-visible local asset folder
-   * and upload new files as IMAssets, preserving nested relative dirs in
-   * IMAsset.folderPath. The lower-level adapter/outbox/uploader already
-   * existed; this method wires them into the real daemon lifecycle.
-   */
-  async ensureDropFolderRuntime(workspaceId) {
-    if (!workspaceId || !this.paths?.root) return;
-    if (this.dropFolderWorkspaceId === workspaceId && this.dropFolderTimer) return;
-    this.stopDropFolderRuntime();
-    this.dropFolderWorkspaceId = workspaceId;
-    const workspaceRoot = resolveUserAssetWorkspaceDir(workspaceId);
-    this.dropFolderWorkspaceDir = workspaceRoot;
-    await mkdir(join13(workspaceRoot, "drop"), { recursive: true });
-    await mkdir(join13(workspaceRoot, "uploaded"), { recursive: true });
-    await mkdir(join13(workspaceRoot, "upload-failed"), { recursive: true });
-    this.assetOriginOutbox = new OriginOutbox({ dbPath: join13(this.paths.root, "asset-origin.db") });
-    this.dropFolderAdapter = new DropFolderAdapter({ workspaceDir: workspaceRoot });
-    this.dropFolderUploadRunner = new UploadRunner({
-      outbox: this.assetOriginOutbox,
-      cloud: new DaemonAssetUploadClient(this.config),
-      adapters: { "drop-folder": this.dropFolderAdapter },
-      maxAttempts: 3
-    });
-    const tick = () => {
-      this.runDropFolderTick().catch((err) => {
-        process.stderr.write(`[daemon] drop-folder sync failed: ${err.message}
-`);
-      });
-    };
-    this.dropFolderTimer = setInterval(tick, 1e3);
-    tick();
-    process.stdout.write(`[daemon] drop-folder asset sync watching ${join13(workspaceRoot, "drop")}
-`);
-  }
-  stopDropFolderRuntime() {
-    if (this.dropFolderTimer) {
-      clearInterval(this.dropFolderTimer);
-      this.dropFolderTimer = void 0;
-    }
-    try {
-      this.assetOriginOutbox?.close();
-    } catch {
-    }
-    this.assetOriginOutbox = void 0;
-    this.dropFolderAdapter = void 0;
-    this.dropFolderUploadRunner = void 0;
-    this.dropFolderWorkspaceId = "";
-    this.dropFolderWorkspaceDir = "";
-    this.dropFolderTickInFlight = false;
-    this.dropFolderStable.clear();
-  }
-  async runDropFolderTick() {
-    if (this.dropFolderTickInFlight) return;
-    const workspaceId = this.dropFolderWorkspaceId;
-    const adapter = this.dropFolderAdapter;
-    const outbox = this.assetOriginOutbox;
-    const runner = this.dropFolderUploadRunner;
-    if (!workspaceId || !adapter || !outbox || !runner) return;
-    this.dropFolderTickInFlight = true;
-    try {
-      const observations = await adapter.scanOnce(workspaceId);
-      for (const obs of observations) {
-        const id = await adapter.identifySource(obs);
-        if (!this.isDropFolderObservationStable(id.sourceRef, obs.detail)) continue;
-        outbox.enqueue({
-          workspaceId: obs.workspaceId,
-          originKind: "drop-folder",
-          sourceRef: id.sourceRef,
-          payloadJson: JSON.stringify(obs.detail),
-          hintsJson: JSON.stringify(id.hints ?? {}),
-          observedAt: obs.observedAt
-        });
-      }
-      const processed = await runner.drainOnce();
-      if (processed > 0) {
-        this.dropFolderStable.clear();
-        process.stdout.write(`[daemon] drop-folder uploaded/processed ${processed} asset(s)
-`);
-        await this.syncAssetState(workspaceId).catch(
-          (err) => process.stderr.write(`[daemon] drop-folder post-sync failed: ${err.message}
-`)
-        );
-      }
-    } finally {
-      this.dropFolderTickInFlight = false;
-    }
-  }
-  isDropFolderObservationStable(sourceRef, detail) {
-    const raw = detail && typeof detail === "object" ? detail : {};
-    const size = typeof raw.size === "number" ? raw.size : -1;
-    const mtime = typeof raw.mtime === "number" ? raw.mtime : -1;
-    const previous = this.dropFolderStable.get(sourceRef);
-    this.dropFolderStable.set(sourceRef, { size, mtime });
-    return Boolean(previous && previous.size === size && previous.mtime === mtime);
-  }
   /**
    * SyncWorker FlushFn — pushes local writes to cloud.
    *
@@ -8675,44 +7480,44 @@ var Runner = class extends EventEmitter3 {
     const id = encodeURIComponent(row.resource_id);
     const body = row.operation === "delete" ? void 0 : safeJsonParse(row.payload);
     let method;
-    let path9;
+    let path7;
     switch (op) {
       case "workspace.create":
         method = "POST";
-        path9 = "/api/im/workspaces";
+        path7 = "/api/im/workspaces";
         break;
       case "workspace.update":
         method = "PATCH";
-        path9 = `/api/im/workspaces/${id}`;
+        path7 = `/api/im/workspaces/${id}`;
         break;
       case "workspace.delete":
         method = "DELETE";
-        path9 = `/api/im/workspaces/${id}`;
+        path7 = `/api/im/workspaces/${id}`;
         break;
       // agent.create must use /register — POST /api/im/agents is not exposed.
       case "agent.create":
         method = "POST";
-        path9 = "/api/im/register";
+        path7 = "/api/im/register";
         break;
       case "agent.update":
         method = "PATCH";
-        path9 = `/api/im/agents/${id}`;
+        path7 = `/api/im/agents/${id}`;
         break;
       case "agent.delete":
         method = "DELETE";
-        path9 = `/api/im/agents/${id}`;
+        path7 = `/api/im/agents/${id}`;
         break;
       case "agent_profile.create":
         method = "POST";
-        path9 = "/api/im/agent_profiles";
+        path7 = "/api/im/agent_profiles";
         break;
       case "agent_profile.update":
         method = "PATCH";
-        path9 = `/api/im/agent_profiles/${id}`;
+        path7 = `/api/im/agent_profiles/${id}`;
         break;
       case "agent_profile.delete":
         method = "DELETE";
-        path9 = `/api/im/agent_profiles/${id}`;
+        path7 = `/api/im/agent_profiles/${id}`;
         break;
       default:
         process.stderr.write(`[daemon] sync flush op=${op} id=${row.id} result=drop (unknown op)
@@ -8721,7 +7526,7 @@ var Runner = class extends EventEmitter3 {
     }
     let res;
     try {
-      res = await this.cloud.request(method, path9, { body });
+      res = await this.cloud.request(method, path7, { body });
     } catch (err) {
       process.stderr.write(
         `[daemon] sync flush op=${op} id=${row.id} result=retry (threw: ${err.message})
@@ -8744,89 +7549,6 @@ var Runner = class extends EventEmitter3 {
     return { ok: res.ok, status: res.status, message: res.error?.message };
   }
 };
-var DaemonAssetUploadClient = class {
-  constructor(config) {
-    this.config = config;
-  }
-  config;
-  async uploadAsset(req) {
-    const form = new FormData();
-    form.set("workspaceId", req.workspaceId);
-    form.set("kind", "file");
-    form.set("metadata", JSON.stringify(req.metadata));
-    if (req.folderPath !== void 0) form.set("folderPath", req.folderPath);
-    form.set("file", new Blob([req.bytes], { type: req.mime ?? "application/octet-stream" }), req.filename);
-    const url = `${this.config.cloud_api_base.replace(/\/$/, "")}/api/im/assets`;
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), 6e4);
-    let res;
-    try {
-      res = await fetch(url, {
-        method: "POST",
-        headers: { Authorization: `Bearer ${this.config.api_key}` },
-        body: form,
-        signal: controller.signal
-      });
-    } catch (err) {
-      if (err.name === "AbortError") {
-        throw new Error("asset upload timed out after 60000ms");
-      }
-      throw err;
-    } finally {
-      clearTimeout(timer);
-    }
-    const text = await res.text();
-    let body;
-    try {
-      body = text ? JSON.parse(text) : void 0;
-    } catch {
-      body = text;
-    }
-    if (!res.ok || isCloudErrorEnvelope(body)) {
-      throw new Error(`asset upload failed (${res.status}): ${cloudUploadErrorMessage(body)}`);
-    }
-    const data = unwrapCloudData(body);
-    const assetId = stringValue(data, "id");
-    const contentHash = stringValue(data, "contentHash");
-    if (!assetId || !contentHash) {
-      throw new Error("asset upload response missing id/contentHash");
-    }
-    return { assetId, contentHash };
-  }
-};
-function isCloudErrorEnvelope(raw) {
-  return Boolean(raw && typeof raw === "object" && "ok" in raw && raw.ok === false);
-}
-function cloudUploadErrorMessage(raw) {
-  if (raw && typeof raw === "object") {
-    const error = raw.error;
-    if (typeof error === "string") return error;
-    if (error && typeof error === "object") {
-      const message = error.message;
-      if (typeof message === "string") return message;
-    }
-  }
-  return typeof raw === "string" ? raw : "request failed";
-}
-function unwrapCloudData(raw) {
-  if (raw && typeof raw === "object") {
-    const data = raw.data;
-    if (data && typeof data === "object" && !Array.isArray(data)) return data;
-  }
-  return {};
-}
-function stringValue(obj, key) {
-  const value = obj[key];
-  return typeof value === "string" && value.length > 0 ? value : void 0;
-}
-function resolveUserAssetWorkspaceDir(workspaceId) {
-  const override = process.env.PRISMER_ASSET_SYNC_ROOT;
-  if (override) return join13(override, workspaceId);
-  const home = homedir6();
-  const desktop = join13(home, "Desktop");
-  const base = existsSync9(desktop) ? desktop : home;
-  return join13(base, "Prismer Assets", workspaceId);
-}
 function readTargetDaemonId(payload) {
   if (typeof payload.targetDaemonId === "string" && payload.targetDaemonId.length > 0) {
     return payload.targetDaemonId;
@@ -8877,14 +7599,6 @@ function validateStaticHostedAgent(raw) {
     }
   };
 }
-function parseProfileConfig(raw) {
-  try {
-    const parsed = JSON.parse(raw);
-    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
-  } catch {
-    return {};
-  }
-}
 function safeJsonParse(raw) {
   try {
     return JSON.parse(raw);
@@ -8896,7 +7610,7 @@ function safeJsonParse(raw) {
 // src/pair.ts
 import { generateKeyPairSync } from "crypto";
 import { hostname as hostname2 } from "os";
-import { setTimeout as sleep2 } from "timers/promises";
+import { setTimeout as sleep } from "timers/promises";
 import qrcode from "qrcode";
 async function pair(opts) {
   const paths = opts.paths ?? resolvePaths();
@@ -8965,7 +7679,7 @@ Scan with Lumin to approve, or open: ${offer.qrUrl}
   const pollIntervalMs = opts.pollIntervalMs ?? 5e3;
   for (let i = 0; i < maxAttempts; i += 1) {
     if (i > 0 || !localOnlyMode) {
-      await sleep2(pollIntervalMs);
+      await sleep(pollIntervalMs);
     }
     const res = await cloud.request(
       "GET",
@@ -9002,7 +7716,7 @@ function unwrapEnvelope(raw) {
 }
 
 // src/cli/index.ts
-import { Command as Command19 } from "commander";
+import { Command as Command18 } from "commander";
 
 // src/cli/commands/adapter.ts
 import { spawnSync as spawnSync2 } from "child_process";
@@ -9010,12 +7724,12 @@ import {
   copyFileSync,
   existsSync as existsSync12,
   mkdirSync as mkdirSync8,
-  readFileSync as readFileSync10,
-  statSync as statSync3,
+  readFileSync as readFileSync9,
+  statSync as statSync2,
   writeFileSync as writeFileSync7
 } from "fs";
-import { homedir as homedir7 } from "os";
-import { dirname as dirname8, join as join15 } from "path";
+import { homedir as homedir4 } from "os";
+import { dirname as dirname7, join as join11 } from "path";
 import { Command } from "commander";
 init_util();
 init_ui();
@@ -9028,7 +7742,7 @@ var INSTALL_SPECS = {
     binary: "claude",
     hint: "Set ANTHROPIC_API_KEY in your shell profile, or rely on Claude Code OAuth login. Run `claude login` to sign in.",
     authHints: ["ANTHROPIC_API_KEY or Claude Code OAuth login (`claude login`)"],
-    hookTarget: { path: join15(homedir7(), ".claude", "hooks.json"), kind: "json-file" }
+    hookTarget: { path: join11(homedir4(), ".claude", "hooks.json"), kind: "json-file" }
   },
   openclaw: {
     name: "openclaw",
@@ -9037,7 +7751,7 @@ var INSTALL_SPECS = {
     binary: "openclaw",
     hint: "OpenClaw runs as a gateway. Configure ~/.openclaw/openclaw.json and start it with `openclaw gateway` before tasks dispatch.",
     authHints: ["~/.openclaw/openclaw.json gateway.auth.bearerTokens", "Prismer daemon api_key"],
-    hookTarget: { path: join15(homedir7(), ".openclaw", "hooks"), kind: "directory" }
+    hookTarget: { path: join11(homedir4(), ".openclaw", "hooks"), kind: "directory" }
   },
   codex: {
     name: "codex",
@@ -9046,7 +7760,7 @@ var INSTALL_SPECS = {
     binary: "codex",
     hint: "Set OPENAI_API_KEY in your shell profile. Verify with `codex --help`.",
     authHints: ["OPENAI_API_KEY or Codex CLI account login"],
-    hookTarget: { path: join15(homedir7(), ".codex", "hooks.json"), kind: "json-file" }
+    hookTarget: { path: join11(homedir4(), ".codex", "hooks.json"), kind: "json-file" }
   },
   hermes: {
     name: "hermes",
@@ -9055,7 +7769,7 @@ var INSTALL_SPECS = {
     binary: "hermes",
     hint: "Hermes runs as a long-lived HTTP gateway in your own Python venv. Start with `hermes -p <profile> gateway` after configuring ~/.hermes/.env.",
     authHints: ["~/.hermes/.env API_SERVER_KEY", "Hermes profile provider credentials"],
-    hookTarget: { path: join15(homedir7(), ".hermes", "hooks.json"), kind: "json-file" }
+    hookTarget: { path: join11(homedir4(), ".hermes", "hooks.json"), kind: "json-file" }
   }
 };
 function buildAdapterCommand() {
@@ -9143,8 +7857,8 @@ function buildAdapterCommand() {
   });
   return cmd;
 }
-function runInstall(spec, version, dryRun) {
-  const { argv0, args } = installCommand(spec, version);
+function runInstall(spec, version2, dryRun) {
+  const { argv0, args } = installCommand(spec, version2);
   getUI().line(`> ${argv0} ${args.join(" ")}`);
   if (dryRun) {
     getUI().line("(dry-run \u2014 not executing)");
@@ -9271,11 +7985,11 @@ function runHooks(spec, opts) {
   let backup;
   if (planned.kind === "directory") {
     mkdirSync8(planned.path, { recursive: true });
-    const markerPath = join15(planned.path, "prismer.json");
+    const markerPath = join11(planned.path, "prismer.json");
     backup = backupIfExists(markerPath);
     writeFileSync7(markerPath, JSON.stringify(prismerHookMarker(spec), null, 2) + "\n", "utf8");
   } else {
-    mkdirSync8(dirname8(planned.path), { recursive: true });
+    mkdirSync8(dirname7(planned.path), { recursive: true });
     backup = backupIfExists(planned.path);
     const merged = mergeHookJson(planned.path, spec);
     writeFileSync7(planned.path, JSON.stringify(merged, null, 2) + "\n", "utf8");
@@ -9288,16 +8002,16 @@ function runHooks(spec, opts) {
     hook: inspectHook(spec)
   };
 }
-function installCommand(spec, version) {
-  const ref = version === "latest" ? spec.package : `${spec.package}@${version}`;
+function installCommand(spec, version2) {
+  const ref = version2 === "latest" ? spec.package : `${spec.package}@${version2}`;
   switch (spec.manager) {
     case "npm":
       return { argv0: "npm", args: ["install", "-g", ref] };
     case "pipx":
-      const pyRef = version === "latest" ? spec.package : `${spec.package}==${version}`;
+      const pyRef = version2 === "latest" ? spec.package : `${spec.package}==${version2}`;
       return { argv0: "pipx", args: ["install", pyRef] };
     case "pip":
-      const pipRef = version === "latest" ? spec.package : `${spec.package}==${version}`;
+      const pipRef = version2 === "latest" ? spec.package : `${spec.package}==${version2}`;
       return { argv0: "pip", args: ["install", "--user", pipRef] };
   }
 }
@@ -9345,7 +8059,7 @@ function inspectAuthEnv(spec) {
         hints: spec.authHints ?? []
       };
     case "hermes": {
-      const envFile = join15(homedir7(), ".hermes", ".env");
+      const envFile = join11(homedir4(), ".hermes", ".env");
       return {
         ok: existsSync12(envFile) || Boolean(process.env.HERMES_API_KEY || process.env.API_SERVER_KEY),
         present: [
@@ -9356,7 +8070,7 @@ function inspectAuthEnv(spec) {
       };
     }
     case "openclaw": {
-      const cfgFile = join15(homedir7(), ".openclaw", "openclaw.json");
+      const cfgFile = join11(homedir4(), ".openclaw", "openclaw.json");
       return {
         ok: existsSync12(cfgFile) || Boolean(process.env.OPENCLAW_API_KEY),
         present: [
@@ -9376,8 +8090,8 @@ function inspectHook(spec) {
     return { supported: false, markerPresent: false };
   }
   if (spec.name === "openclaw") {
-    const jsonPath = join15(homedir7(), ".openclaw", "hooks.json");
-    const markerPath = join15(target.path, "prismer.json");
+    const jsonPath = join11(homedir4(), ".openclaw", "hooks.json");
+    const markerPath = join11(target.path, "prismer.json");
     const jsonMarkerPresent = existsSync12(jsonPath) && fileContainsPrismerMarker(jsonPath);
     const dirMarkerPresent = existsSync12(markerPath) && fileContainsPrismerMarker(markerPath);
     return {
@@ -9391,7 +8105,7 @@ function inspectHook(spec) {
     };
   }
   if (target.kind === "directory") {
-    const markerPath = join15(target.path, "prismer.json");
+    const markerPath = join11(target.path, "prismer.json");
     return {
       supported: true,
       kind: target.kind,
@@ -9435,21 +8149,21 @@ function prismerHookMarker(spec) {
     installed_at: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-function mergeHookJson(path9, spec) {
+function mergeHookJson(path7, spec) {
   const marker = prismerHookMarker(spec);
-  if (!existsSync12(path9)) {
+  if (!existsSync12(path7)) {
     return {
       prismer: marker
     };
   }
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync10(path9, "utf8"));
+    parsed = JSON.parse(readFileSync9(path7, "utf8"));
   } catch (err) {
-    throw new Error(`Cannot parse ${path9} as JSON: ${err.message}`);
+    throw new Error(`Cannot parse ${path7} as JSON: ${err.message}`);
   }
   if (!isRecord(parsed)) {
-    throw new Error(`Cannot merge ${path9}: expected a JSON object`);
+    throw new Error(`Cannot merge ${path7}: expected a JSON object`);
   }
   const next = { ...parsed };
   next.prismer = marker;
@@ -9467,18 +8181,18 @@ function mergeHookJson(path9, spec) {
   }
   return next;
 }
-function backupIfExists(path9) {
-  if (!existsSync12(path9)) return null;
+function backupIfExists(path7) {
+  if (!existsSync12(path7)) return null;
   const suffix = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const backup = `${path9}.bak.${suffix}`;
-  const stat = statSync3(path9);
+  const backup = `${path7}.bak.${suffix}`;
+  const stat = statSync2(path7);
   if (stat.isDirectory()) return null;
-  copyFileSync(path9, backup);
+  copyFileSync(path7, backup);
   return backup;
 }
-function fileContainsPrismerMarker(path9) {
+function fileContainsPrismerMarker(path7) {
   try {
-    return readFileSync10(path9, "utf8").includes("prismer-daemon-runtime");
+    return readFileSync9(path7, "utf8").includes("prismer-daemon-runtime");
   } catch {
     return false;
   }
@@ -9496,7 +8210,7 @@ function readAdapterConfig() {
     return {};
   }
 }
-function recordInstallInConfig(spec, binPath, version) {
+function recordInstallInConfig(spec, binPath, version2) {
   const paths = resolvePaths();
   if (!configExists(paths)) {
     process.stderr.write(
@@ -9518,7 +8232,7 @@ function recordInstallInConfig(spec, binPath, version) {
     package_manager: spec.manager,
     package_name: spec.package,
     binary: binPath,
-    version,
+    version: version2,
     installed_at: (/* @__PURE__ */ new Date()).toISOString()
   };
   saveConfig({ ...cfg, adapters }, paths);
@@ -9898,7 +8612,7 @@ async function fetchCloudProfiles(cloud, imUserId) {
 async function fetchLocalServer() {
   const paths = resolvePaths();
   const pid = readPidFile(paths);
-  if (!pid || !pidAlive2(pid)) return { ok: false, error: "daemon process is not running", agents: [] };
+  if (!pid || !pidAlive(pid)) return { ok: false, error: "daemon process is not running", agents: [] };
   try {
     const [healthRes, agentsRes] = await Promise.all([
       fetch(`${LOCAL_SERVER}/healthz`, { signal: AbortSignal.timeout(1e3) }),
@@ -9922,38 +8636,19 @@ function whichBinary2(bin) {
 
 // src/cli/commands/asset.ts
 import { Command as Command3 } from "commander";
-import { existsSync as existsSync13, lstatSync, readdirSync, readFileSync as readFileSync11, writeFileSync as writeFileSync8 } from "fs";
-import { basename as basename3, dirname as dirname9, join as join16, relative as relative3 } from "path";
+import { existsSync as existsSync13, readFileSync as readFileSync10, writeFileSync as writeFileSync8 } from "fs";
+import { basename as basename2 } from "path";
 init_util();
 init_ui();
 function buildAssetCommand() {
   const cmd = new Command3("asset").description("Inspect IM assets");
-  cmd.command("sync").description("Sync remote asset indexes into the local daemon DB; optionally prefetch bytes").requiredOption("--workspace-id <id>", "Workspace id").option("--bytes", "Also prefetch asset bytes into ~/.prismer/cache").option("--limit <n>", "Maximum number of assets to prefetch when --bytes is set", parsePositiveInt).option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
-    const result = await syncAssets(opts);
-    if (opts.json) {
-      printJson({ ok: true, data: result });
-      return;
-    }
-    getUI().line(`Synced asset metadata: ${result.metadata.applied} applied (cursor=${result.metadata.cursor})`);
-    getUI().line(`Synced workspace files: ${result.workspaceFiles.applied} applied (cursor=${result.workspaceFiles.cursor ?? "null"})`);
-    if (opts.bytes) {
-      getUI().line(
-        `Prefetched bytes: ${result.prefetch.fetched}/${result.prefetch.considered} assets, ${result.prefetch.bytes} bytes`
-      );
-      if (result.prefetch.failed.length > 0) {
-        getUI().line(`Prefetch failures: ${result.prefetch.failed.length}`);
-      }
-    } else {
-      getUI().line("Asset bytes were not prefetched; they are downloaded lazily on first use. Run with --bytes to fill ~/.prismer/cache.");
-    }
-  }, { code: "asset_sync_failed" }));
   cmd.command("list").description("List assets for a workspace, optionally filtered by task").option("--workspace-id <id>", "Workspace id").option("--task-id <id>", "Task id filter").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
     const cloud = mkCloud();
     const query = new URLSearchParams();
     if (opts.workspaceId) query.set("workspaceId", opts.workspaceId);
     if (opts.taskId) query.set("taskId", opts.taskId);
-    const path9 = `/api/im/assets${query.toString() ? `?${query.toString()}` : ""}`;
-    const res = await cloud.request("GET", path9);
+    const path7 = `/api/im/assets${query.toString() ? `?${query.toString()}` : ""}`;
+    const res = await cloud.request("GET", path7);
     if (!res.ok) exitWithError(`asset list failed (${res.status}): ${res.error?.message ?? "request failed"}`, { code: res.error?.code ?? "asset_list_failed" });
     const body = res.data;
     if (isErrorEnvelope(body)) {
@@ -9965,20 +8660,13 @@ function buildAssetCommand() {
     }
     printAssetList(body);
   }, { code: "asset_list_failed" }));
-  cmd.command("upload <path>").description("Upload a local file or directory as IM assets").requiredOption("--workspace-id <id>", "Workspace id").option("--kind <kind>", "Asset kind", "file").option("--folder-path <path>", "Cloud folderPath prefix for the uploaded file(s)").option("--task-id <id>", "Source task id").option("--agent-id <id>", "Source agent IM user id").option("--container-id <id>", "Container id; also added to metadata for sandbox-output assets").option("--metadata <json>", "Additional JSON metadata").option("--mime <type>", "Override file MIME type").option("--json", "Output machine-readable JSON").action(runAction(async (inputPath, opts) => {
-    const body = await uploadAssetPath(inputPath, opts);
+  cmd.command("upload <file>").description("Upload a local file as an IM asset").requiredOption("--workspace-id <id>", "Workspace id").option("--kind <kind>", "Asset kind", "file").option("--task-id <id>", "Source task id").option("--agent-id <id>", "Source agent IM user id").option("--container-id <id>", "Container id; also added to metadata for sandbox-output assets").option("--metadata <json>", "Additional JSON metadata").option("--mime <type>", "Override file MIME type").option("--json", "Output machine-readable JSON").action(runAction(async (file, opts) => {
+    const body = await uploadAsset(file, opts);
     if (opts.json) {
       printJson(body ?? null);
       return;
     }
-    if (isUploadManyResult(body)) {
-      getUI().line(`Uploaded ${body.data.count} assets`);
-      for (const item of body.data.items) {
-        printAssetDetail("Uploaded asset", item.file, item.response);
-      }
-    } else {
-      printAssetDetail("Uploaded asset", inputPath, body);
-    }
+    printAssetDetail("Uploaded asset", file, body);
   }, { code: "asset_upload_failed" }));
   cmd.command("download <assetId>").description("Download asset bytes").requiredOption("--out <path>", "Destination file path").action(runAction(async (assetId, opts) => {
     await downloadAsset(assetId, opts.out);
@@ -9998,12 +8686,12 @@ function buildAssetCommand() {
     }
     printAssetDetail("Asset", assetId, body);
   }, { code: "asset_get_failed" }));
-  cmd.command("by-hash <sha256>").description("Fetch asset metadata by content hash").option("--workspace-id <id>", "Workspace id (required by the cloud API)").option("--json", "Output machine-readable JSON").action(runAction(async (sha2564, opts) => {
+  cmd.command("by-hash <sha256>").description("Fetch asset metadata by content hash").option("--workspace-id <id>", "Workspace id (required by the cloud API)").option("--json", "Output machine-readable JSON").action(runAction(async (sha2562, opts) => {
     const cloud = mkCloud();
     const query = new URLSearchParams();
     if (opts.workspaceId) query.set("wsId", opts.workspaceId);
-    const path9 = `/api/im/assets/by-hash/${encodeURIComponent(sha2564)}${query.toString() ? `?${query.toString()}` : ""}`;
-    const res = await cloud.request("GET", path9);
+    const path7 = `/api/im/assets/by-hash/${encodeURIComponent(sha2562)}${query.toString() ? `?${query.toString()}` : ""}`;
+    const res = await cloud.request("GET", path7);
     if (!res.ok) exitWithError(`asset by-hash failed (${res.status}): ${res.error?.message ?? "request failed"}`, { code: res.error?.code ?? "asset_by_hash_failed" });
     const body = res.data;
     if (isErrorEnvelope(body)) {
@@ -10013,7 +8701,7 @@ function buildAssetCommand() {
       printJson(body ?? null);
       return;
     }
-    printAssetDetail("Asset hash", sha2564, body);
+    printAssetDetail("Asset hash", sha2562, body);
   }, { code: "asset_by_hash_failed" }));
   return cmd;
 }
@@ -10021,102 +8709,10 @@ function mkCloud() {
   const cfg = loadConfig(resolvePaths());
   return new CloudClient({ baseUrl: cfg.cloud_api_base, apiKey: cfg.api_key });
 }
-async function syncAssets(opts) {
-  const paths = resolvePaths();
-  const cfg = loadConfig(paths);
-  const cloud = new CloudClient({ baseUrl: cfg.cloud_api_base, apiKey: cfg.api_key });
-  const db = openLocalDb(paths.localDb);
-  try {
-    const stateDir = `${paths.root}/${opts.workspaceId}`;
-    const metadataIndex = new AssetMetadataIndex({
-      db,
-      cloud,
-      workspaceId: opts.workspaceId,
-      workspaceStateDir: stateDir
-    });
-    const mirror = new WorkspaceMirror({
-      db,
-      cloud,
-      workspaceId: opts.workspaceId,
-      workspaceStateDir: stateDir
-    });
-    const [metadata, workspaceFiles] = await Promise.all([
-      metadataIndex.pullDelta(),
-      mirror.pullDelta()
-    ]);
-    const prefetch = opts.bytes ? await prefetchAssetBytes({
-      db,
-      cloud,
-      workspaceId: opts.workspaceId,
-      cacheDir: paths.cacheDir,
-      maxBytes: cfg.cache?.max_bytes,
-      limit: opts.limit
-    }) : { considered: 0, fetched: 0, bytes: 0, failed: [] };
-    return { workspaceId: opts.workspaceId, metadata, workspaceFiles, prefetch };
-  } finally {
-    db.close();
-  }
-}
-async function prefetchAssetBytes(opts) {
-  const limitClause = opts.limit ? " LIMIT ?" : "";
-  const params = [opts.workspaceId];
-  if (opts.limit) params.push(opts.limit);
-  const rows = opts.db.prepare(
-    `SELECT asset_id, content_hash, mime, size_bytes
-       FROM asset_metadata_index
-       WHERE workspace_id = ?
-       ORDER BY asset_index_seq DESC${limitClause}`
-  ).all(...params);
-  const cache = new AssetCache({
-    db: opts.db,
-    cloud: opts.cloud,
-    cacheDir: opts.cacheDir,
-    maxBytes: opts.maxBytes
-  });
-  let fetched = 0;
-  let bytes = 0;
-  const failed = [];
-  for (const row of rows) {
-    try {
-      const cached = await cache.getOrFetch(row.content_hash, {
-        workspaceIdHint: opts.workspaceId,
-        assetId: row.asset_id
-      });
-      fetched += 1;
-      bytes += cached.sizeBytes;
-    } catch (err) {
-      failed.push({
-        assetId: row.asset_id,
-        contentHash: row.content_hash,
-        error: err.message
-      });
-    }
-  }
-  return { considered: rows.length, fetched, bytes, failed };
-}
-async function uploadAssetPath(inputPath, opts) {
-  if (!existsSync13(inputPath)) exitWithError(`path not found: ${inputPath}`);
-  const stat = lstatSync(inputPath);
-  if (stat.isSymbolicLink()) exitWithError(`refusing to upload symlink: ${inputPath}`);
-  if (stat.isFile()) {
-    return uploadAsset(inputPath, { ...opts, folderPath: normalizeFolderPath(opts.folderPath) });
-  }
-  if (!stat.isDirectory()) exitWithError(`path is not a file or directory: ${inputPath}`);
-  const files = listFilesRecursive(inputPath);
-  if (files.length === 0) exitWithError(`directory has no uploadable files: ${inputPath}`);
-  const items = [];
-  for (const file of files) {
-    const relDir = dirname9(relative3(inputPath, file));
-    const folderPath = combineFolderPath(opts.folderPath, relDir === "." ? "" : relDir);
-    const response = await uploadAsset(file, { ...opts, folderPath });
-    items.push({ file, folderPath: folderPath ?? null, response });
-  }
-  return { ok: true, data: { count: items.length, items } };
-}
 async function uploadAsset(file, opts) {
   if (!existsSync13(file)) exitWithError(`file not found: ${file}`);
   const cfg = loadConfig(resolvePaths());
-  const bytes = readFileSync11(file);
+  const bytes = readFileSync10(file);
   const metadata = parseMetadata(opts.metadata);
   if (opts.taskId && metadata.taskId === void 0) metadata.taskId = opts.taskId;
   if (opts.containerId && metadata.containerId === void 0) metadata.containerId = opts.containerId;
@@ -10125,9 +8721,8 @@ async function uploadAsset(file, opts) {
   form.set("kind", opts.kind);
   if (opts.agentId) form.set("sourceAgentImUserId", opts.agentId);
   if (opts.taskId) form.set("sourceTaskId", opts.taskId);
-  if (opts.folderPath !== void 0) form.set("folderPath", opts.folderPath);
   if (Object.keys(metadata).length > 0) form.set("metadata", JSON.stringify(metadata));
-  form.set("file", new Blob([bytes], { type: opts.mime ?? "application/octet-stream" }), basename3(file));
+  form.set("file", new Blob([bytes], { type: opts.mime ?? "application/octet-stream" }), basename2(file));
   const url = `${cfg.cloud_api_base.replace(/\/$/, "")}/api/im/assets`;
   let res;
   try {
@@ -10145,37 +8740,6 @@ async function uploadAsset(file, opts) {
   }
   return body;
 }
-function listFilesRecursive(root) {
-  const out = [];
-  for (const name of readdirSync(root)) {
-    if (name.startsWith(".")) continue;
-    const full = join16(root, name);
-    const stat = lstatSync(full);
-    if (stat.isSymbolicLink()) continue;
-    if (stat.isDirectory()) {
-      out.push(...listFilesRecursive(full));
-    } else if (stat.isFile()) {
-      out.push(full);
-    }
-  }
-  return out.sort();
-}
-function combineFolderPath(prefix, relDir) {
-  const normalizedPrefix = normalizeFolderPath(prefix);
-  const normalizedRel = normalizeFolderPath(relDir);
-  if (normalizedPrefix && normalizedRel) return `${normalizedPrefix}/${normalizedRel}`;
-  return normalizedPrefix ?? normalizedRel;
-}
-function normalizeFolderPath(value) {
-  if (value === void 0) return void 0;
-  const normalized = value.trim().replace(/\\/g, "/").replace(/^\/+/, "").replace(/\/+$/, "");
-  return normalized.length > 0 ? normalized : "";
-}
-function isUploadManyResult(raw) {
-  return Boolean(
-    raw && typeof raw === "object" && raw.ok === true && raw.data && Array.isArray(raw.data.items)
-  );
-}
 async function downloadAsset(assetId, outPath) {
   const cloud = mkCloud();
   const res = await cloud.fetchRaw(`/api/im/assets/${encodeURIComponent(assetId)}`);
@@ -10269,13 +8833,6 @@ function stringField(obj, key) {
   const value = obj?.[key];
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
-function parsePositiveInt(raw) {
-  const n = Number(raw);
-  if (!Number.isInteger(n) || n <= 0) {
-    throw new Error("--limit must be a positive integer");
-  }
-  return n;
-}
 
 // src/cli/commands/banner.ts
 init_util();
@@ -10331,7 +8888,7 @@ ${name} (${role})`);
     getUI().line(`Group created ${data.groupId ?? "(unknown)"}
 ${data.title ?? opts.name} (${memberCount} members)`);
   });
-  group.command("messages <groupId>").description("List group messages").option("--limit <n>", "Max messages", parsePositiveInt2).option("--before <id>", "Return messages before this message id").option("--json", "Print raw JSON response").action(async (groupId, opts) => {
+  group.command("messages <groupId>").description("List group messages").option("--limit <n>", "Max messages", parsePositiveInt).option("--before <id>", "Return messages before this message id").option("--json", "Print raw JSON response").action(async (groupId, opts) => {
     const data = await requestOrExit(
       "GET",
       withQuery(`/api/im/groups/${encodeURIComponent(groupId)}/messages`, {
@@ -10369,7 +8926,7 @@ ${data.title ?? opts.name} (${memberCount} members)`);
     getUI().line(`Removed ${memberId} from group ${groupId}`);
   });
   cmd.addCommand(group);
-  cmd.command("messages <conversationId>").description("List conversation messages").option("--limit <n>", "Max messages", parsePositiveInt2).option("--before <id>", "Return messages before this message id").option("--json", "Print raw JSON response").action(async (conversationId, opts) => {
+  cmd.command("messages <conversationId>").description("List conversation messages").option("--limit <n>", "Max messages", parsePositiveInt).option("--before <id>", "Return messages before this message id").option("--json", "Print raw JSON response").action(async (conversationId, opts) => {
     const data = await requestOrExit(
       "GET",
       withQuery(`/api/im/messages/${encodeURIComponent(conversationId)}`, {
@@ -10385,15 +8942,15 @@ ${data.title ?? opts.name} (${memberCount} members)`);
   });
   return cmd;
 }
-async function requestOrExit(method, path9, body) {
+async function requestOrExit(method, path7, body) {
   let res;
   try {
-    res = await mkCloud2().request(method, path9, body === void 0 ? void 0 : { body });
+    res = await mkCloud2().request(method, path7, body === void 0 ? void 0 : { body });
   } catch (err) {
     exitWithError(sanitizeError(err.message));
   }
   if (!res.ok) {
-    exitWithError(`${method} ${path9} failed (${res.status}): ${sanitizeError(res.error?.message ?? "unknown")}`);
+    exitWithError(`${method} ${path7} failed (${res.status}): ${sanitizeError(res.error?.message ?? "unknown")}`);
   }
   return unwrapEnvelope2(res.data);
 }
@@ -10425,20 +8982,20 @@ function unwrapEnvelope2(raw) {
 function parseCsv(value) {
   return value.split(",").map((v) => v.trim()).filter(Boolean);
 }
-function parsePositiveInt2(value) {
+function parsePositiveInt(value) {
   const parsed = Number.parseInt(value, 10);
   if (!Number.isInteger(parsed) || parsed < 1) {
     throw new Error("expected a positive integer");
   }
   return parsed;
 }
-function withQuery(path9, params) {
+function withQuery(path7, params) {
   const query = new URLSearchParams();
   for (const [key, value] of Object.entries(params)) {
     if (value !== void 0) query.set(key, String(value));
   }
   const suffix = query.toString();
-  return suffix ? `${path9}?${suffix}` : path9;
+  return suffix ? `${path7}?${suffix}` : path7;
 }
 function printMessageSummary(label, data) {
   const msg = data.message ?? {};
@@ -10565,7 +9122,7 @@ init_util();
 init_ui();
 function buildCookbookCommand() {
   const cmd = new Command7("cookbook").description("Run CLI-only 54release MVP regression suites");
-  cmd.command("run").description("Run one or more cookbook smoke suites using the configured API key").option("--suite <name>", "status|im|task|group|asset|sandbox|all, comma-separated", "all").option("--workspace-id <id>", "Workspace id for workspace-scoped suites").option("--agent-id <id>", "Agent IM user id for task create smoke").option("--group-id <id>", "Group/conversation id for group message history smoke").option("--sandbox-id <id>", "Sandbox id for sandbox status smoke").option("--prompt <text>", "Prompt for optional task create smoke").option("--timeout-ms <ms>", "Request/task timeout", parsePositiveInt3, 6e4).option("--strict", "Treat skipped optional checks as failure").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
+  cmd.command("run").description("Run one or more cookbook smoke suites using the configured API key").option("--suite <name>", "status|im|task|group|asset|sandbox|all, comma-separated", "all").option("--workspace-id <id>", "Workspace id for workspace-scoped suites").option("--agent-id <id>", "Agent IM user id for task create smoke").option("--group-id <id>", "Group/conversation id for group message history smoke").option("--sandbox-id <id>", "Sandbox id for sandbox status smoke").option("--prompt <text>", "Prompt for optional task create smoke").option("--timeout-ms <ms>", "Request/task timeout", parsePositiveInt2, 6e4).option("--strict", "Treat skipped optional checks as failure").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
     const suites = parseSuites(opts.suite);
     const cloud = mkCloud3(opts.timeoutMs);
     const checks = [];
@@ -10607,8 +9164,8 @@ async function runStatusSuite(cloud) {
     await check("status", "cloud health", "GET", "/api/health"),
     await check("status", "current IM identity", "GET", "/api/im/me", void 0, cloud)
   ];
-  async function check(suite, name, method, path9, body, client = cloud) {
-    return requestCheck(client, suite, name, method, path9, body);
+  async function check(suite, name, method, path7, body, client = cloud) {
+    return requestCheck(client, suite, name, method, path7, body);
   }
 }
 async function runIMSuite(cloud) {
@@ -10682,27 +9239,27 @@ async function runSandboxSuite(cloud, opts) {
   }
   return checks;
 }
-async function requestCheck(cloud, suite, name, method, path9, body) {
+async function requestCheck(cloud, suite, name, method, path7, body) {
   let res;
   try {
-    res = await cloud.request(method, path9, body === void 0 ? void 0 : { body });
+    res = await cloud.request(method, path7, body === void 0 ? void 0 : { body });
   } catch (err) {
-    return { suite, name, status: "fail", endpoint: path9, detail: sanitize(err.message) };
+    return { suite, name, status: "fail", endpoint: path7, detail: sanitize(err.message) };
   }
   if (!res.ok) {
     return {
       suite,
       name,
       status: "fail",
-      endpoint: path9,
+      endpoint: path7,
       detail: sanitize(`${res.status}: ${res.error?.message ?? "request failed"}`)
     };
   }
   const data = unwrap(res.data);
   if (isApiError(res.data)) {
-    return { suite, name, status: "fail", endpoint: path9, detail: sanitize(apiErrorMessage(res.data)), data: res.data };
+    return { suite, name, status: "fail", endpoint: path7, detail: sanitize(apiErrorMessage(res.data)), data: res.data };
   }
-  return { suite, name, status: "pass", endpoint: path9, detail: summarizeData(data), data };
+  return { suite, name, status: "pass", endpoint: path7, detail: summarizeData(data), data };
 }
 async function pollTask(cloud, taskId, timeoutMs) {
   const started = Date.now();
@@ -10809,7 +9366,7 @@ function taskFrom(data) {
 function sanitize(message) {
   return message.replace(/sk-prismer-[A-Za-z0-9_-]+/g, "sk-prismer-***");
 }
-function parsePositiveInt3(value) {
+function parsePositiveInt2(value) {
   const parsed = Number.parseInt(value, 10);
   if (!Number.isFinite(parsed) || parsed <= 0) {
     throw new Error("expected a positive integer");
@@ -10820,9 +9377,9 @@ function parsePositiveInt3(value) {
 // src/cli/commands/daemon.ts
 import { Command as Command8 } from "commander";
 import { spawn as spawn5 } from "child_process";
-import { createReadStream, existsSync as existsSync14, mkdirSync as mkdirSync9, openSync as openSync2, statSync as statSync4 } from "fs";
-import { setTimeout as sleep3 } from "timers/promises";
-import { join as join17 } from "path";
+import { createReadStream, existsSync as existsSync14, mkdirSync as mkdirSync9, openSync, statSync as statSync3 } from "fs";
+import { setTimeout as sleep2 } from "timers/promises";
+import { join as join12 } from "path";
 init_util();
 init_ui();
 function buildDaemonCommand() {
@@ -10840,7 +9397,7 @@ function buildDaemonCommand() {
   async function runForeground(opts) {
     const paths = resolvePaths();
     const existingPid = readPidFile(paths);
-    if (existingPid && pidAlive2(existingPid)) {
+    if (existingPid && pidAlive(existingPid)) {
       exitWithError(`Daemon already running (pid ${existingPid}). Use \`prismer daemon stop\` first.`);
     }
     writePidFile(paths, process.pid);
@@ -10864,7 +9421,7 @@ function buildDaemonCommand() {
     while (!configExists(paths)) {
       if (stopRequested) return;
       getUI().info(`[daemon] waiting for ${paths.configFile} \u2014 run \`prismer setup\` to create it`);
-      await sleep3(5e3);
+      await sleep2(5e3);
     }
     runner = new Runner({
       startLocalServer: opts.localServer !== false,
@@ -10893,12 +9450,12 @@ function buildDaemonCommand() {
   async function startBackground(opts) {
     const paths = resolvePaths();
     const existingPid = readPidFile(paths);
-    if (existingPid && pidAlive2(existingPid)) {
+    if (existingPid && pidAlive(existingPid)) {
       exitWithError(`Daemon already running (pid ${existingPid}). Use \`prismer daemon stop\` first.`);
     }
     if (!existsSync14(paths.logsDir)) mkdirSync9(paths.logsDir, { recursive: true });
-    const logFile = join17(paths.logsDir, "daemon.log");
-    const fd = openSync2(logFile, "a");
+    const logFile = join12(paths.logsDir, "daemon.log");
+    const fd = openSync(logFile, "a");
     const args = [process.argv[1], "daemon", "run"];
     if (opts.port) args.push("--port", String(opts.port));
     if (opts.localServer === false) args.push("--no-local-server");
@@ -10910,9 +9467,9 @@ function buildDaemonCommand() {
     child.unref();
     const deadline = Date.now() + 5e3;
     while (Date.now() < deadline) {
-      await sleep3(200);
+      await sleep2(200);
       const pid = readPidFile(paths);
-      if (pid && pidAlive2(pid)) {
+      if (pid && pidAlive(pid)) {
         if (opts.json) printJson({ ok: true, pid, logFile });
         else getUI().ok("Daemon started", `pid ${pid} \xB7 logs ${logFile}`);
         return;
@@ -10927,7 +9484,7 @@ function buildDaemonCommand() {
     const paths = resolvePaths();
     const pid = readPidFile(paths);
     if (!pid) exitWithError("No daemon.pid found \u2014 daemon does not appear to be running.");
-    if (!pidAlive2(pid)) {
+    if (!pidAlive(pid)) {
       clearPidFile(paths);
       getUI().warn("Daemon was not alive", `pid ${pid}; cleared stale pid file`);
       return;
@@ -10939,12 +9496,12 @@ function buildDaemonCommand() {
     }
     const deadline = Date.now() + (opts.timeout ?? 5e3);
     while (Date.now() < deadline) {
-      if (!pidAlive2(pid)) {
+      if (!pidAlive(pid)) {
         clearPidFile(paths);
         getUI().ok("Daemon stopped", `pid ${pid}`);
         return;
       }
-      await sleep3(200);
+      await sleep2(200);
     }
     process.stderr.write(`Daemon did not exit within timeout; pid ${pid} may still be alive.
 `);
@@ -10964,7 +9521,7 @@ function buildDaemonCommand() {
   cmd.command("status").description("Show daemon process + WS state").option("--json", "Output JSON (default)").action(async () => {
     const paths = resolvePaths();
     const pid = readPidFile(paths);
-    const alive = pid ? pidAlive2(pid) : false;
+    const alive = pid ? pidAlive(pid) : false;
     if (!pid || !alive) {
       printJson({ running: false, pid: pid ?? null, paths: { config: paths.configFile } });
       return;
@@ -10981,7 +9538,7 @@ function buildDaemonCommand() {
   });
   cmd.command("logs").description("Show daemon logs").option("--tail <n>", "Number of lines to show", (v) => Number.parseInt(v, 10), 80).option("--follow", "Follow log output").option("--json", "Accept --json for global flag compatibility (raw log bytes are streamed)").action(async (opts) => {
     const paths = resolvePaths();
-    const logFile = join17(paths.logsDir, "daemon.log");
+    const logFile = join12(paths.logsDir, "daemon.log");
     if (!existsSync14(logFile)) {
       exitWithError(`No daemon log found at ${logFile}. Start the daemon with \`prismer daemon start\`.`);
     }
@@ -10992,9 +9549,9 @@ function buildDaemonCommand() {
   });
   return cmd;
 }
-async function tailFromEnd(path9, lines) {
+async function tailFromEnd(path7, lines) {
   const { open } = await import("fs/promises");
-  const handle = await open(path9, "r");
+  const handle = await open(path7, "r");
   try {
     const stat = await handle.stat();
     let size = stat.size;
@@ -11022,14 +9579,14 @@ async function tailFromEnd(path9, lines) {
     await handle.close();
   }
 }
-async function followFile(path9) {
-  let offset = statSync4(path9).size;
+async function followFile(path7) {
+  let offset = statSync3(path7).size;
   for (; ; ) {
-    await sleep3(1e3);
-    const size = statSync4(path9).size;
+    await sleep2(1e3);
+    const size = statSync3(path7).size;
     if (size < offset) offset = 0;
     if (size === offset) continue;
-    const stream = createReadStream(path9, { start: offset, end: size - 1, encoding: "utf8" });
+    const stream = createReadStream(path7, { start: offset, end: size - 1, encoding: "utf8" });
     for await (const chunk of stream) process.stdout.write(chunk);
     offset = size;
   }
@@ -11039,8 +9596,8 @@ async function followFile(path9) {
 init_util();
 import { Command as Command9 } from "commander";
 import { createReadStream as createReadStream2, existsSync as existsSync15 } from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join18 } from "path";
+import { homedir as homedir5 } from "os";
+import { join as join13 } from "path";
 import { createInterface } from "readline";
 var DEFAULT_LIMIT2 = 50;
 function buildEventsCommand() {
@@ -11078,10 +9635,10 @@ function buildEventsStatsCommand() {
   });
 }
 function addEventOptions(cmd) {
-  return cmd.option("--limit <n>", "Max events to return/read", parsePositiveInt4, DEFAULT_LIMIT2).option("--agent-id <id>", "Filter by agent id").option("--session-id <id>", "Filter by session id").option("--family <name>", "Filter by event family").option("--type <name>", "Filter by event type").option("--json", "Output JSON (default)");
+  return cmd.option("--limit <n>", "Max events to return/read", parsePositiveInt3, DEFAULT_LIMIT2).option("--agent-id <id>", "Filter by agent id").option("--session-id <id>", "Filter by session id").option("--family <name>", "Filter by event family").option("--type <name>", "Filter by event type").option("--json", "Output JSON (default)");
 }
 function eventsPath() {
-  return join18(process.env.PRISMER_HOME ?? join18(homedir8(), ".prismer"), "para", "events.jsonl");
+  return join13(process.env.PRISMER_HOME ?? join13(homedir5(), ".prismer"), "para", "events.jsonl");
 }
 function unavailable(file) {
   return {
@@ -11159,13 +9716,13 @@ function normalizeFilters(opts) {
 function cleanFilters(filters) {
   return Object.fromEntries(Object.entries(filters).filter(([, value]) => value !== void 0));
 }
-function parsePositiveInt4(v) {
+function parsePositiveInt3(v) {
   const n = Number.parseInt(v, 10);
   return Number.isFinite(n) && n > 0 ? n : DEFAULT_LIMIT2;
 }
 
 // src/cli/commands/memory.ts
-import Database5 from "better-sqlite3";
+import Database4 from "better-sqlite3";
 import { Command as Command10 } from "commander";
 import { existsSync as existsSync16 } from "fs";
 init_util();
@@ -11193,7 +9750,7 @@ function buildMemoryCommand() {
     }));
     process.exitCode = 1;
   });
-  cmd.command("list").description("List memory records, or local cache records when gateway is unavailable").option("--workspace-id <id>", "Workspace to list (required for daemon RPC)").option("--page-type <type>", "Filter by pageType (hub/leaf/decision/glossary/archive)").option("--limit <n>", "Max items", parsePositiveInt5, 20).option("--json", "Output JSON (default)").action(async (opts) => {
+  cmd.command("list").description("List memory records, or local cache records when gateway is unavailable").option("--workspace-id <id>", "Workspace to list (required for daemon RPC)").option("--page-type <type>", "Filter by pageType (hub/leaf/decision/glossary/archive)").option("--limit <n>", "Max items", parsePositiveInt4, 20).option("--json", "Output JSON (default)").action(async (opts) => {
     const limit = clampLimit(opts.limit);
     const daemonPaths = [];
     if (opts.workspaceId) {
@@ -11212,7 +9769,7 @@ function buildMemoryCommand() {
     printJson(unavailable2("list", snapshot, { items: snapshot.items, limit }));
     process.exitCode = 1;
   });
-  cmd.command("search").description("Search memory records, or local cache metadata when gateway is unavailable").argument("[query]", "Search text").option("--query <text>", "Search text").option("--workspace-id <id>", "Workspace to search (required for daemon RPC)").option("--limit <n>", "Max items", parsePositiveInt5, 20).option("--json", "Output JSON (default)").action(async (argQuery, opts) => {
+  cmd.command("search").description("Search memory records, or local cache metadata when gateway is unavailable").argument("[query]", "Search text").option("--query <text>", "Search text").option("--workspace-id <id>", "Workspace to search (required for daemon RPC)").option("--limit <n>", "Max items", parsePositiveInt4, 20).option("--json", "Output JSON (default)").action(async (argQuery, opts) => {
     const query = opts.query ?? argQuery ?? "";
     const limit = clampLimit(opts.limit);
     const encoded = encodeURIComponent(query);
@@ -11256,9 +9813,9 @@ function buildMemoryCommand() {
 }
 async function tryDaemon(methods, paths) {
   for (const method of methods) {
-    for (const path9 of paths) {
+    for (const path7 of paths) {
       try {
-        const res = await fetch(`${LOCAL_BASE}${path9}`, { method, signal: AbortSignal.timeout(1500) });
+        const res = await fetch(`${LOCAL_BASE}${path7}`, { method, signal: AbortSignal.timeout(1500) });
         if (res.status === 404) continue;
         const body = await readJson4(res);
         if (!res.ok) {
@@ -11266,12 +9823,12 @@ async function tryDaemon(methods, paths) {
             ok: false,
             error: {
               code: `daemon_http_${res.status}`,
-              message: messageFromBody(body) ?? `Daemon endpoint ${method} ${path9} returned HTTP ${res.status}`
+              message: messageFromBody(body) ?? `Daemon endpoint ${method} ${path7} returned HTTP ${res.status}`
             },
-            checks: { daemon: { url: LOCAL_BASE, endpoint: path9, reachable: true } }
+            checks: { daemon: { url: LOCAL_BASE, endpoint: path7, reachable: true } }
           };
         }
-        return normalizeDaemonBody(body, { method, path: path9 });
+        return normalizeDaemonBody(body, { method, path: path7 });
       } catch {
         continue;
       }
@@ -11329,7 +9886,7 @@ function readCacheSnapshot(limit) {
   if (!empty.dbExists) return empty;
   let db;
   try {
-    db = new Database5(paths.localDb, { readonly: true, fileMustExist: true });
+    db = new Database4(paths.localDb, { readonly: true, fileMustExist: true });
     const hasAssets = tableExists(db, "cached_assets");
     const hasFiles = tableExists(db, "workspace_files_mirror");
     const assets = hasAssets ? db.prepare("SELECT COUNT(*) AS count, COALESCE(SUM(size_bytes), 0) AS sizeBytes FROM cached_assets").get() : { count: 0, sizeBytes: 0 };
@@ -11418,7 +9975,7 @@ function searchableText(item) {
     item.localPath
   ].filter(Boolean).join(" ");
 }
-function parsePositiveInt5(v) {
+function parsePositiveInt4(v) {
   const n = Number.parseInt(v, 10);
   return Number.isFinite(n) && n > 0 ? n : 20;
 }
@@ -11483,9 +10040,9 @@ function buildPairCommand() {
 
 // src/cli/commands/profile.ts
 import { Command as Command12 } from "commander";
-import { existsSync as existsSync17, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync11, writeFileSync as writeFileSync9 } from "fs";
 import { tmpdir } from "os";
-import { join as join19 } from "path";
+import { join as join14 } from "path";
 import { spawnSync as spawnSync4 } from "child_process";
 init_util();
 function buildProfileCommand() {
@@ -11533,12 +10090,12 @@ function buildProfileCommand() {
     const profile = await cloud.get(
       `/api/im/agent_profiles/${encodeURIComponent(profileId)}`
     );
-    const tmpFile = join19(tmpdir(), `prismer-profile-${profileId}.json`);
+    const tmpFile = join14(tmpdir(), `prismer-profile-${profileId}.json`);
     writeFileSync9(tmpFile, JSON.stringify(profile.config, null, 2), "utf8");
     const editor = process.env.EDITOR || "vi";
     const ed = spawnSync4(editor, [tmpFile], { stdio: "inherit" });
     if (ed.status !== 0) exitWithError(`editor exited ${ed.status}`, { code: "editor_failed" });
-    const newConfig = JSON.parse(readFileSync12(tmpFile, "utf8"));
+    const newConfig = JSON.parse(readFileSync11(tmpFile, "utf8"));
     const res = await cloud.request("PATCH", `/api/im/agent_profiles/${encodeURIComponent(profileId)}`, {
       body: { config: newConfig, version: profile.version }
     });
@@ -11559,9 +10116,9 @@ function mkCloud4() {
 }
 function readJsonArg(arg) {
   if (arg.startsWith("@")) {
-    const path9 = arg.slice(1);
-    if (!existsSync17(path9)) throw new Error(`File not found: ${path9}`);
-    return JSON.parse(readFileSync12(path9, "utf8"));
+    const path7 = arg.slice(1);
+    if (!existsSync17(path7)) throw new Error(`File not found: ${path7}`);
+    return JSON.parse(readFileSync11(path7, "utf8"));
   }
   return JSON.parse(arg);
 }
@@ -11572,200 +10129,13 @@ async function resolveDefaultWorkspaceId(cloud) {
   return def.id;
 }
 
-// src/cli/commands/reset.ts
-import { Command as Command13 } from "commander";
-import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync18, mkdirSync as mkdirSync10, rmSync, renameSync as renameSync2 } from "fs";
-import { homedir as homedir9 } from "os";
-import { dirname as dirname10, join as join20 } from "path";
-import { setTimeout as sleep4 } from "timers/promises";
-init_util();
-init_ui();
-function buildResetCommand() {
-  return new Command13("reset").description("Stop daemon and reset local runtime state so setup can bind another account").option("--yes", "Actually perform the reset").option("--check", "Print the reset plan without changing files").option("--wipe", "Delete local state instead of archiving it").option("--timeout <ms>", "Time to wait for daemon shutdown (default 5000)", (v) => Number.parseInt(v, 10), 5e3).option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
-    const paths = resolvePaths();
-    const pid = readPidFile(paths);
-    const runningPid = pid && pidAlive2(pid) ? pid : null;
-    const archivePath = opts.wipe ? null : `${paths.root}.reset.${timestamp()}`;
-    const assetSyncRoot = resolveAssetSyncRoot();
-    const assetSyncArchivePath = opts.wipe ? null : `${assetSyncRoot}.reset.${timestamp()}`;
-    const hermesHome = resolveHermesHome();
-    const hermesArchivePath = opts.wipe ? null : `${hermesHome}.reset.${timestamp()}`;
-    const hermesGatewayPids = findHermesGatewayPids2();
-    const plan = {
-      root: paths.root,
-      exists: existsSync18(paths.root),
-      runningPid,
-      mode: opts.wipe ? "wipe" : "archive",
-      archivePath,
-      assetSyncRoot,
-      assetSyncExists: existsSync18(assetSyncRoot),
-      assetSyncArchivePath,
-      hermesHome,
-      hermesExists: existsSync18(hermesHome),
-      hermesArchivePath,
-      hermesGatewayPids,
-      willStopDaemon: runningPid !== null,
-      nextStep: "prismer setup"
-    };
-    if (opts.check) {
-      printPlan(plan, opts.json);
-      return;
-    }
-    if (!opts.yes) {
-      exitWithError("Refusing to reset without --yes. Run `prismer reset --check` to preview.", {
-        code: "confirmation_required"
-      });
-    }
-    if (runningPid !== null) {
-      await stopDaemon(runningPid, opts.timeout ?? 5e3);
-      clearPidFile(paths);
-    } else if (pid) {
-      clearPidFile(paths);
-    }
-    for (const gatewayPid of hermesGatewayPids) {
-      await stopProcess(gatewayPid, opts.timeout ?? 5e3, "Hermes gateway");
-    }
-    if (existsSync18(paths.root)) {
-      if (opts.wipe) {
-        rmSync(paths.root, { recursive: true, force: true });
-      } else {
-        if (!archivePath) throw new Error("internal: archivePath missing");
-        if (!existsSync18(dirname10(archivePath))) {
-          mkdirSync10(dirname10(archivePath), { recursive: true });
-        }
-        renameSync2(paths.root, archivePath);
-      }
-    }
-    if (existsSync18(assetSyncRoot)) {
-      if (opts.wipe) {
-        rmSync(assetSyncRoot, { recursive: true, force: true });
-      } else {
-        if (!assetSyncArchivePath) throw new Error("internal: assetSyncArchivePath missing");
-        if (!existsSync18(dirname10(assetSyncArchivePath))) {
-          mkdirSync10(dirname10(assetSyncArchivePath), { recursive: true });
-        }
-        renameSync2(assetSyncRoot, assetSyncArchivePath);
-      }
-    }
-    if (existsSync18(hermesHome)) {
-      if (opts.wipe) {
-        rmSync(hermesHome, { recursive: true, force: true });
-      } else {
-        if (!hermesArchivePath) throw new Error("internal: hermesArchivePath missing");
-        if (!existsSync18(dirname10(hermesArchivePath))) {
-          mkdirSync10(dirname10(hermesArchivePath), { recursive: true });
-        }
-        renameSync2(hermesHome, hermesArchivePath);
-      }
-    }
-    mkdirSync10(paths.root, { recursive: true });
-    if (opts.json) {
-      printJson({ ok: true, reset: true, plan });
-      return;
-    }
-    const ui = getUI();
-    ui.ok("Runtime reset complete", paths.root);
-    if (archivePath) ui.line(`  archived: ${archivePath}`);
-    if (assetSyncArchivePath && plan.assetSyncExists) ui.line(`  asset sync archived: ${assetSyncArchivePath}`);
-    if (hermesArchivePath && plan.hermesExists) ui.line(`  Hermes archived: ${hermesArchivePath}`);
-    if (hermesGatewayPids.length > 0) ui.line(`  stopped Hermes gateway pid(s): ${hermesGatewayPids.join(", ")}`);
-    ui.line("  next: prismer setup");
-  }, { code: "reset_failed" }));
-}
-function printPlan(plan, json) {
-  if (json) {
-    printJson({ ok: true, check: true, plan });
-    return;
-  }
-  const ui = getUI();
-  ui.header("Runtime reset plan");
-  ui.blank();
-  ui.line(`  root:        ${plan.root}`);
-  ui.line(`  exists:      ${plan.exists ? "yes" : "no"}`);
-  ui.line(`  daemon:      ${plan.runningPid ? `running pid ${plan.runningPid}` : "not running"}`);
-  ui.line(`  mode:        ${plan.mode}`);
-  if (plan.archivePath) ui.line(`  archive:     ${plan.archivePath}`);
-  ui.line(`  asset sync:  ${plan.assetSyncExists ? plan.assetSyncRoot : `${plan.assetSyncRoot} (not found)`}`);
-  if (plan.assetSyncArchivePath) ui.line(`  asset archive: ${plan.assetSyncArchivePath}`);
-  ui.line(`  Hermes:     ${plan.hermesExists ? plan.hermesHome : `${plan.hermesHome} (not found)`}`);
-  if (plan.hermesArchivePath) ui.line(`  Hermes archive: ${plan.hermesArchivePath}`);
-  ui.line(
-    `  Hermes gateway: ${plan.hermesGatewayPids.length > 0 ? `running pid(s) ${plan.hermesGatewayPids.join(", ")}` : "not running"}`
-  );
-  ui.blank();
-  ui.line("Run `prismer reset --yes` to apply, then `prismer setup` to bind a new account.");
-}
-async function stopDaemon(pid, timeoutMs) {
-  await stopProcess(pid, timeoutMs, "daemon");
-}
-async function stopProcess(pid, timeoutMs, label) {
-  try {
-    process.kill(pid, "SIGTERM");
-  } catch (err) {
-    throw new Error(`SIGTERM failed for ${label} pid ${pid}: ${err.message}`);
-  }
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    if (!pidAlive2(pid)) return;
-    await sleep4(100);
-  }
-  try {
-    process.kill(pid, "SIGKILL");
-  } catch (err) {
-    throw new Error(`SIGKILL failed for ${label} pid ${pid}: ${err.message}`);
-  }
-  const killDeadline = Date.now() + 1e3;
-  while (Date.now() < killDeadline) {
-    if (!pidAlive2(pid)) return;
-    await sleep4(100);
-  }
-  throw new Error(`${label} pid ${pid} did not exit within ${timeoutMs + 1e3}ms`);
-}
-function timestamp() {
-  return (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-}
-function resolveAssetSyncRoot() {
-  const override = process.env.PRISMER_ASSET_SYNC_ROOT;
-  if (override) return override;
-  const home = homedir9();
-  const desktop = join20(home, "Desktop");
-  const base = existsSync18(desktop) ? desktop : home;
-  return join20(base, "Prismer Assets");
-}
-function resolveHermesHome() {
-  return process.env.HERMES_HOME || join20(homedir9(), ".hermes");
-}
-function findHermesGatewayPids2() {
-  try {
-    const out = execFileSync2("ps", ["-axo", "pid=,command="], { encoding: "utf8" });
-    const current = process.pid;
-    return out.split(/\r?\n/).map((line) => {
-      const trimmed = line.trim();
-      const match = /^(\d+)\s+(.+)$/.exec(trimmed);
-      if (!match) return null;
-      const pid = Number.parseInt(match[1], 10);
-      const command = match[2];
-      if (!Number.isFinite(pid) || pid === current) return null;
-      if (!isHermesGatewayCommand2(command)) return null;
-      return pid;
-    }).filter((pid) => pid !== null);
-  } catch {
-    return [];
-  }
-}
-function isHermesGatewayCommand2(command) {
-  if (!/\bgateway\b/.test(command) || !/\brun\b/.test(command)) return false;
-  return /(^|\s)(?:\S*\/)?hermes(?:\s|$)/.test(command);
-}
-
 // src/cli/commands/sandbox.ts
-import { Command as Command14 } from "commander";
+import { Command as Command13 } from "commander";
 init_util();
 init_ui();
 function buildSandboxCommand() {
-  const cmd = new Command14("sandbox").description("Inspect and smoke-test sandbox lifecycle");
-  cmd.command("list").description("List sandbox containers in a workspace").requiredOption("--workspace-id <id>", "Workspace id").option("--status <status>", "Status filter").option("--limit <n>", "Max rows", parsePositiveInt6, 50).option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
+  const cmd = new Command13("sandbox").description("Inspect and smoke-test sandbox lifecycle");
+  cmd.command("list").description("List sandbox containers in a workspace").requiredOption("--workspace-id <id>", "Workspace id").option("--status <status>", "Status filter").option("--limit <n>", "Max rows", parsePositiveInt5, 50).option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
     const query = new URLSearchParams({ workspaceId: opts.workspaceId, limit: String(opts.limit) });
     if (opts.status) query.set("status", opts.status);
     const body = await cloudRequest("GET", `/api/sandboxes?${query.toString()}`);
@@ -11824,7 +10194,7 @@ function buildSandboxCommand() {
     }
     printSnapshotResult(id, body);
   }, { code: "sandbox_snapshot_failed" }));
-  cmd.command("runCmd <id> <command...>").description("Run a command in a sandbox container").option("--timeout-ms <ms>", "Command timeout", parsePositiveInt6, 6e4).option("--json", "Output machine-readable JSON").allowUnknownOption(true).action(runAction(async (id, command, opts) => {
+  cmd.command("runCmd <id> <command...>").description("Run a command in a sandbox container").option("--timeout-ms <ms>", "Command timeout", parsePositiveInt5, 6e4).option("--json", "Output machine-readable JSON").allowUnknownOption(true).action(runAction(async (id, command, opts) => {
     if (!Array.isArray(command) || command.length === 0) exitWithError("runCmd requires a command after --", { code: "invalid_argument" });
     const body = await cloudRequest("POST", `/api/sandboxes/${encodeURIComponent(id)}/runCmd`, {
       command,
@@ -11865,12 +10235,12 @@ function errorMessage2(raw) {
   if (typeof raw.error === "string") return raw.error;
   return raw.error?.message ?? "request failed";
 }
-async function cloudRequest(method, path9, body) {
+async function cloudRequest(method, path7, body) {
   const cloud = mkCloud5();
-  const res = await cloud.request(method, path9, body === void 0 ? void 0 : { body });
-  if (!res.ok) exitWithError(`${method} ${path9} failed (${res.status}): ${res.error?.message ?? "request failed"}`);
+  const res = await cloud.request(method, path7, body === void 0 ? void 0 : { body });
+  if (!res.ok) exitWithError(`${method} ${path7} failed (${res.status}): ${res.error?.message ?? "request failed"}`);
   const responseBody = res.data;
-  if (isErrorEnvelope2(responseBody)) exitWithError(`${method} ${path9} failed (${res.status}): ${errorMessage2(responseBody)}`);
+  if (isErrorEnvelope2(responseBody)) exitWithError(`${method} ${path7} failed (${res.status}): ${errorMessage2(responseBody)}`);
   return responseBody;
 }
 function printSandboxList(raw) {
@@ -11945,7 +10315,7 @@ function writeLine2(label, value) {
   if (value === void 0 || value === null || value === "") return;
   getUI().line(`  ${label}: ${String(value)}`);
 }
-function parsePositiveInt6(value) {
+function parsePositiveInt5(value) {
   const parsed = Number.parseInt(value, 10);
   if (!Number.isFinite(parsed) || parsed <= 0) {
     throw new Error("expected a positive integer");
@@ -11963,16 +10333,16 @@ async function safeParseResponse(res) {
 }
 
 // src/cli/commands/setup.ts
-import { Command as Command15 } from "commander";
+import { Command as Command14 } from "commander";
 import { hostname as hostname3 } from "os";
 import { spawn as spawn6 } from "child_process";
-import { randomBytes as randomBytes2 } from "crypto";
-import { existsSync as existsSync19, renameSync as renameSync3 } from "fs";
+import { randomBytes } from "crypto";
+import { existsSync as existsSync18, renameSync } from "fs";
 import { createServer as createServer2 } from "http";
 init_util();
 init_ui();
 function buildSetupCommand() {
-  return new Command15("setup").description("Set up this local runtime and bind it to Prismer Cloud").argument("[api-key]", "Prismer daemon API key; primarily for manual recovery and automation").option(
+  return new Command14("setup").description("Set up this local runtime and bind it to Prismer Cloud").argument("[api-key]", "Prismer daemon API key; primarily for manual recovery and automation").option(
     "--cloud <url>",
     `Cloud base URL (default: ${DEFAULT_CLOUD_BASE_URL}; bare host:port is auto-prefixed http://)`,
     (v) => v
@@ -11985,7 +10355,7 @@ function buildSetupCommand() {
     } catch (err) {
       exitWithError(err.message, { code: "invalid_cloud_url" });
     }
-    let apiKey = apiKeyArg ?? (opts.force ? void 0 : process.env.PRISMER_API_KEY);
+    let apiKey = apiKeyArg ?? process.env.PRISMER_API_KEY;
     const authToken = opts.token ?? process.env.PRISMER_AUTH_TOKEN;
     if (!opts.json) {
       printBanner({ compact: true });
@@ -11993,6 +10363,7 @@ function buildSetupCommand() {
       getUI().blank();
     }
     const shouldStart = opts.start !== false;
+    stopRunningDaemon(paths);
     if (opts.pair || opts.asUser) {
       if (!opts.json) warn("Legacy pair setup path", "plain `prismer setup --start` is the canonical runtime binding flow");
       if (opts.asUser && process.env.LOCAL_ONLY !== "1") {
@@ -12083,11 +10454,10 @@ function buildSetupCommand() {
         return;
       }
       const previousConfig = configExists(paths) ? loadConfig(paths) : null;
-      const daemonId = previousConfig && previousConfig.api_key === apiKey && previousConfig.cloud_api_base === cloudBaseUrl ? previousConfig.daemon_id : newDaemonId();
       const config = {
         api_key: apiKey,
         cloud_api_base: cloudBaseUrl,
-        daemon_id: daemonId
+        daemon_id: newDaemonId()
       };
       if (previousConfig && shouldArchiveLocalDb(previousConfig, config)) {
         archiveLocalDb(paths.localDb);
@@ -12117,7 +10487,7 @@ function buildSetupCommand() {
   }, { code: "setup_failed" }));
 }
 async function runBrowserSetup(input) {
-  const state = randomBytes2(18).toString("base64url");
+  const state = randomBytes(18).toString("base64url");
   const server = createServer2();
   const apiKeyPromise = waitForSetupCallback(server, state);
   await new Promise((resolve3, reject) => {
@@ -12214,13 +10584,35 @@ function startDaemonDetached(home) {
   });
   child.unref();
 }
+function stopRunningDaemon(paths) {
+  const pid = readPidFile(paths);
+  if (!pid || !pidAlive(pid)) {
+    if (pid) clearPidFile(paths);
+    return;
+  }
+  try {
+    process.kill(pid, "SIGTERM");
+  } catch {
+    return;
+  }
+  const deadline = Date.now() + 5e3;
+  while (Date.now() < deadline) {
+    if (!pidAlive(pid)) {
+      clearPidFile(paths);
+      return;
+    }
+    const start = Date.now();
+    while (Date.now() - start < 200) {
+    }
+  }
+}
 function shouldArchiveLocalDb(previous, next) {
   return previous.api_key !== next.api_key || previous.cloud_api_base !== next.cloud_api_base || previous.daemon_id !== next.daemon_id;
 }
 function archiveLocalDb(localDbPath) {
-  if (!existsSync19(localDbPath)) return;
+  if (!existsSync18(localDbPath)) return;
   const archived = `${localDbPath}.${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.bak`;
-  renameSync3(localDbPath, archived);
+  renameSync(localDbPath, archived);
 }
 async function mintDaemonApiKey(input) {
   const label = `Daemon: ${input.deviceName} ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}`;
@@ -12240,12 +10632,11 @@ async function mintDaemonApiKey(input) {
 }
 
 // src/cli/commands/status.ts
-import { Command as Command16 } from "commander";
-import { hostname as hostname4 } from "os";
+import { Command as Command15 } from "commander";
 init_util();
 init_ui();
 function buildStatusCommand() {
-  return new Command16("status").description("Show daemon + config + cloud status").option("--json", "Output machine-readable JSON").action(async (opts) => {
+  return new Command15("status").description("Show daemon + config + cloud status").option("--json", "Output machine-readable JSON").action(async (opts) => {
     const paths = resolvePaths();
     if (!configExists(paths)) {
       const report2 = { configured: false, paired: false, paths: { config: paths.configFile } };
@@ -12313,7 +10704,11 @@ function buildStatusCommand() {
         info: daemonStatus.info ?? {}
       },
       cloud: { base: cfg.cloud_api_base, reachable: cloudOk, me, devices, agents },
-      local
+      local,
+      binding: {
+        daemonId: cfg.daemon_id,
+        apiKey: cfg.api_key
+      }
     };
     if (opts.json) {
       printJson(report);
@@ -12336,8 +10731,8 @@ async function readDaemonStatus() {
   const paths = resolvePaths();
   const pid = readPidFile(paths);
   if (pid) {
-    const { pidAlive: pidAlive3 } = await Promise.resolve().then(() => (init_util(), util_exports));
-    if (pidAlive3(pid)) return { running: true, pid };
+    const { pidAlive: pidAlive2 } = await Promise.resolve().then(() => (init_util(), util_exports));
+    if (pidAlive2(pid)) return { running: true, pid };
   }
   return { running: false };
 }
@@ -12365,9 +10760,8 @@ function printPretty(report) {
   ui.blank();
   ok("Config", report.paths.config);
   if (report.daemon.running) {
-    const daemonName = report.cloud.me && typeof report.cloud.me === "object" ? report.cloud.me.user?.username ?? hostname4() : hostname4();
     const ws = report.daemon.wsConnected ? "connected" : "pending";
-    ok("Daemon", `${daemonName}  pid=${report.daemon.pid}  ws=${ws}`);
+    ok("Daemon", `pid=${report.daemon.pid}  ws=${ws}`);
     if (report.daemon.info) {
       const info2 = report.daemon.info;
       if (info2.version) ui.line(`  Version:  ${info2.version}`);
@@ -12382,7 +10776,8 @@ function printPretty(report) {
     ok("Cloud", report.cloud.base);
     const me = report.cloud.me;
     if (me?.user) {
-      ui.line(`  User:     ${me.user.displayName ?? me.user.username ?? "?"}`);
+      const roleTag = me.user.role ? `  role=${me.user.role}` : "";
+      ui.line(`  Account:  ${me.user.displayName ?? me.user.username ?? "?"}${roleTag}`);
     }
     if (me?.credits) {
       ui.line(`  Credits:  ${typeof me.credits.balance === "number" ? me.credits.balance.toLocaleString() : "?"}`);
@@ -12391,6 +10786,12 @@ function printPretty(report) {
     fail2("Cloud", `${report.cloud.base} unreachable or unauthorized`);
     tip("prismer setup --force");
   }
+  if (report.binding) {
+    ui.blank();
+    ui.line(`  Daemon ID:  ${report.binding.daemonId}`);
+    const masked = report.binding.apiKey.slice(0, 14) + "\u2022\u2022\u2022\u2022" + report.binding.apiKey.slice(-4);
+    ui.line(`  API Key:    ${masked}`);
+  }
   if (Array.isArray(report.cloud.devices) && report.cloud.devices.length > 0) {
     const devs = report.cloud.devices;
     ui.blank();
@@ -12401,6 +10802,8 @@ function printPretty(report) {
       const declared = d.hostedAgentSummary?.declared ?? 0;
       ui.line(`    ${statusIcon} ${d.podName?.replace(/^daemon:/, "")?.slice(0, 28) ?? "?"}  kind=${kind}  agents=${declared}`);
     }
+  } else {
+    ui.line(`  Workspace Devices: none`);
   }
   if (Array.isArray(report.cloud.agents) && report.cloud.agents.length > 0) {
     ui.line(`  Hosted agents: ${report.cloud.agents.length}`);
@@ -12416,14 +10819,14 @@ function printPretty(report) {
 }
 
 // src/cli/commands/task.ts
-import { Command as Command17 } from "commander";
-import { setTimeout as sleep5 } from "timers/promises";
+import { Command as Command16 } from "commander";
+import { setTimeout as sleep3 } from "timers/promises";
 init_util();
 function describeStatus(status) {
   return status === 0 ? "network error" : `HTTP ${status}`;
 }
 function buildTaskCommand() {
-  const cmd = new Command17("task").description("Manage tasks");
+  const cmd = new Command16("task").description("Manage tasks");
   cmd.command("create").description("Create + dispatch a task to the given agent and wait for completion").requiredOption("--agent <imUserId>", "Assignee agent IMUser.id").requiredOption("--prompt <text>", "Prompt to send to the adapter").option("--profile <profileId>", "AgentProfile id (cloud picks first if omitted)").option("--capability <name>", "Capability tag", "chat").option("--title <text>", "Task title (defaults to prompt prefix)").option("--timeout-ms <ms>", "Per-task timeout", (v) => Number.parseInt(v, 10)).option("--no-wait", "Just create + print task id; don't poll").option("--json", "Output JSON (default)").action(runAction(async (opts) => {
     const cloud = mkCloud6();
     const body = {
@@ -12500,7 +10903,7 @@ function unwrap2(raw) {
 async function pollUntilTerminal(cloud, taskId, timeoutMs) {
   const deadline = Date.now() + (timeoutMs ?? 5 * 6e4);
   while (Date.now() < deadline) {
-    await sleep5(1e3);
+    await sleep3(1e3);
     const res = await cloud.request(
       "GET",
       `/api/im/tasks/${encodeURIComponent(taskId)}`
@@ -12537,11 +10940,11 @@ function taskFrom2(raw) {
 }
 
 // src/cli/commands/workspace.ts
-import { Command as Command18 } from "commander";
+import { Command as Command17 } from "commander";
 init_util();
 init_ui();
 function buildWorkspaceCommand() {
-  const cmd = new Command18("workspace").description("Manage workspaces, runtime snapshots, and workspace files");
+  const cmd = new Command17("workspace").description("Manage workspaces, runtime snapshots, and workspace files");
   cmd.command("list").description("List workspaces").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
     const cloud = mkCloud7();
     const data = await cloud.get("/api/im/workspaces");
@@ -12775,15 +11178,18 @@ async function readResponseError(res) {
 
 // src/cli/index.ts
 init_ui();
-var VERSION = "1.9.7";
+
+// package.json
+var version = "1.9.22";
+
+// src/cli/index.ts
 function buildProgram() {
-  const program = new Command19("prismer").description("Prismer Cloud daemon CLI (TS-only).").version(VERSION);
+  const program = new Command18("prismer").description("Prismer Cloud daemon CLI (TS-only).").version(version);
   program.addCommand(buildBannerCommand());
   program.addCommand(buildSetupCommand());
   program.addCommand(buildConfigCommand());
   program.addCommand(buildDaemonCommand());
   program.addCommand(buildPairCommand());
-  program.addCommand(buildResetCommand());
   program.addCommand(buildStatusCommand());
   program.addCommand(buildAdapterCommand());
   program.addCommand(buildAgentCommand());